CVE-2026-99200

In the Linux kernel, the following vulnerability has been resolved:

net: hisilicon: hisi femac: Move setting of netops to fix crash

hisi femac drv probe() connects the PHY before dev->netdev ops is assigned. phy attach direct() -> phy link topo add phy() reads dev->netdev ops through netdev need ops lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG NET SHAPER is enabled.

phy link topo add phy from phy attach direct+0xec/0x37c of phy get and connect from hisi femac drv probe+0x1f4/0x558 Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b

Assign netdev ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").