VDB

CVE-2026-80993

CVE-2026-80993 PUBLISHED

Reported by Linux · Published September 11, 2026

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_caps(), the PCS returned by mac_select_pcs is only checked if NULL but mac_select_pcs can also return an error pointer. This can cause a kernel panic as phylink_pcs_inband_caps() only checks if passed PCS is not NULL and directly dereference ops from the phylink_pcs struct. Use the IS_ERR_OR_NULL macro to address both case where the returned PCS can be NULL or an error pointer and prevent a kernel panic.

EPSS 0.17% · 6.2th percentile

Risk Scores

EPSS Score
0.17%
6.2th percentile

Affected Products

VendorProductVersions
LinuxLinuxdf874f9e52c340cc6f0a0014a97b778f67d46849, df874f9e52c340cc6f0a0014a97b778f67d46849, df874f9e52c340cc6f0a0014a97b778f67d46849
LinuxLinux6.14, 0, 6.18.50
LinuxLinux7.3-rc1, 0, 6.18.50
linuxlinux_kernel6.14, 6.14, 6.14

Timeline

  • Sep 11, 2026 CVE Published
  • Sep 11, 2026 CVE Updated
  • Sep 12, 2026 EPSS Score
  • Sep 12, 2026 Coalition ESS Score
  • Sep 17, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›