Unknown severity · Source severity not reportedCVE-2026-99196

net: au1000: move setting of netops to fix crashCVE-2026-99196

Answer in brief

CVE-2026-99196 records a Unknown severity vulnerability in net: au1000: move setting of netops to fix crash. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Oct 28, 2026Updated Oct 28, 2026Source checked Oct 28, 2026First seen by HOL Oct 28, 2026Material review Oct 28, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=ded86da4bbb78cad74cecc368fee3ae3a296e2ca <cfc11024fc061bf36044b40de9ecab57ed0a537d \|\| >=ded86da4bbb78cad74cecc368fee3ae3a296e2ca <beabbafdd0f6779813a7656baa1b412b19bda911	cfc11024fc061bf36044b40de9ecab57ed0a537d, beabbafdd0f6779813a7656baa1b412b19bda911
Linux/Linuxgeneric	7.2	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to cfc11024fc061bf36044b40de9ecab57ed0a537d if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Oct 28, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Oct 28, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Oct 28, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000_probe() calls au1000_mii_probe(), which connects the PHY, before dev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").

Quoted source text, attributed separately from HOL analysis.