CVE-2026-80993

CVE-2026-80993

published September 12, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: phylink: correctly validate returned PCS in phylink_inband_caps

In phylink_inband_caps(), the PCS returned by mac_select_pcs is only

checked if NULL but mac_select_pcs can also return an error pointer.

This can cause a kernel panic as phylink_pcs_inband_caps() only checks

if passed PCS is not NULL and directly dereference ops from the phylink_pcs

struct.

Use the IS_ERR_OR_NULL macro to address both case where the returned

PCS can be NULL or an error pointer and prevent a kernel panic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-09-12T00:19Z
References (3)
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:42Z
    net: phylink: correctly validate returned PCS in phylink_inband_caps
    cvelistv5