DEBIAN-CVE-2026-99199: Null Pointer Dereference
Published Oct 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04eth: Move setting of netops to fix crash hip04macprobe() calls ofphyconnect() before ndev->netdevops is assigned. phyattachdirect() -> phylinktopoaddphy() reads dev->netdevops through netdevneedopslock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIGNETSHAPER is enabled. Assign netdevops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Affected Software
1 affected component
debian/linux*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In hip04_mac_probe(), assign ndev->netdev_ops before calling of_phy_connect().
Linux kernel hip04_eth ndev->netdev_ops assignment order = assign before PHY attach
Event History
Oct 28, 2026
CVE Published
via OSV·11:17 AM
Data Sourced
via OSV·11:17 AM
DescriptionAffected Software