CVE-2026-80993

net: phylink: correctly validate returned PCS in phylink_inband_caps

State
Published
Severity
Not scored
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phylink: correctly validate returned PCS in phylink_inband_caps

In phylink_inband_caps(), the PCS returned by mac_select_pcs is only checked if NULL but mac_select_pcs can also return an error pointer.

This can cause a kernel panic as phylink_pcs_inband_caps() only checks if passed PCS is not NULL and directly dereference ops from the phylink_pcs struct.

Use the IS_ERR_OR_NULL macro to address both case where the returned PCS can be NULL or an error pointer and prevent a kernel panic.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • df874f9e52c340cc6f0a0014a97b778f67d46849 to before b6b533f83461c3730875cf3ed5ff6362dcb67be9Affected
  • df874f9e52c340cc6f0a0014a97b778f67d46849 to before fb4d77553841ae85bed9b2cf03351c401e871d85Affected
  • df874f9e52c340cc6f0a0014a97b778f67d46849 to before f2849b1fd059ec9b3281b771e6ac5aad9feee851Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.