Unscored severity · published Oct 28, 2026
CVE-2026-99200
net: hisilicon: hisi_femac: Move setting of netops to fix crash
New
–
CVSS
–
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
net: hisilicon: hisi_femac: Move setting of netops to fix crash
hisi_femac_drv_probe() connects the PHY before dev->netdev_ops is
assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads
dev->netdev_ops through netdev_need_ops_lock() since the commit in
question, so probing crashes with a NULL pointer dereference when
CONFIG_NET_SHAPER is enabled.
phy_link_topo_add_phy from phy_attach_direct+0xec/0x37c
of_phy_get_and_connect from hisi_femac_drv_probe+0x1f4/0x558
Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
Assign netdev_ops before the PHY attach, as was done for emac in commit
7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
ded86da4bbb78cad74cecc368fee3ae3a296e2ca before 06ef5b084b150c538bc84148e5d710eee012413c; ded86da4bbb78cad74cecc368fee3ae3a296e2ca before 444889dfa27b54b39026e962464b1f8f9093e1ea; 7.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-99200
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-99200
git.kernel.org
https://git.kernel.org/stable/c/06ef5b084b150c538bc84148e5d710eee012413c
git.kernel.org
https://git.kernel.org/stable/c/444889dfa27b54b39026e962464b1f8f9093e1ea
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
