CVE-2026-99196

A flaw was found in the Linux kernel's Au1000 ethernet driver. During device probing with network traffic shaping enabled, the driver attempts to access network operations before they are assigned. This flaw allows a local user or hardware attachment event to trigger a null pointer dereference, resulting in a system crash and Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because triggering the flaw requires administrative or physical access to initialize the network interface, restricting the potential blast radius to a local denial of service. The underlying Au1000 driver targets legacy MIPS architectures, which are not supported or enabled in standard Red Hat Enterprise Linux distributions. Additionally, triggering the condition requires traffic shaping support to be active when the PHY device is attached.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.