CVE-2026-99193

A flaw was found in the Linux kernel's Texas Instruments PRU Ethernet driver. A local user capable of triggering network device initialization can cause a Denial of Service (DoS) by crashing the operating system. When the network interface is probed on a system with network traffic shaping enabled, the driver attempts to access network device operations before they are assigned. This sequence triggers a null pointer dereference, resulting in an immediate kernel crash.

This vulnerability is rated as Moderate impact because exploitation requires privileged administrative access to initialize or probe network devices on systems running Texas Instruments PRU Ethernet hardware. In typical Red Hat Enterprise Linux environments, this specialized embedded hardware is not present, and triggering the NULL pointer dereference additionally depends on network traffic shaping being enabled during interface probing. Because the flaw cannot be triggered remotely or by unprivileged users, the impact is confined to a local denial of service on systems with this specific hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.