UBUNTU-CVE-2026-99193: Null Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssmpruethnetdevinit() calls ofphygetandconnect() before ndev->netdevops is assigned. phyattachdirect() -> phylinktopoaddphy() reads dev->netdevops through netdevneedopslock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIGNETSHAPER is enabled. Assign netdevops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Assign ndev->netdev_ops before the PHY attach in icssm_prueth_netdev_init(), so phy_attach_direct() does not read a NULL netdev_ops pointer when CONFIG_NET_SHAPER is enabled.
Linux kernel net: ti: icssm-prueth ndev->netdev_ops = assigned before of_phy_get_and_connect()