The Linux kernel vulnerability (CVE-2026-80993) involves improper validation of the PCS pointer returned by mac_select_pcs in the phylink_inband_caps() function. The original code only checked if the PCS pointer was NULL before dereferencing it, but mac_select_pcs can also return an error pointer. This improper check can cause a kernel panic when phylink_pcs_inband_caps() dereferences the ops member of the PCS struct without verifying if the pointer is an error. The issue was fixed by using the IS_ERR_OR_NULL macro to validate the PCS pointer correctly, covering both NULL and error pointer cases.

The vulnerability can cause a kernel panic, which leads to a denial of service condition on affected systems running the vulnerable Linux kernel. There is no indication of code execution or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves modifying the phylink_inband_caps function to use the IS_ERR_OR_NULL macro for proper validation of the PCS pointer. Until an official patch is available, avoid using vulnerable kernel versions or apply vendor-provided updates once released.