CVE-2026-97435

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: flower: reject cross-chip redirect

dsa_port_from_netdev() may return a valid port from a different switch

chip. Programming another chip's port index into the local hardware

causes redirection to the wrong port, or an out-of-bounds access if the

index exceeds the local chip's port count.

Apply a minimal fix that adds a check to catch this case and adjusts the

extack message. When cls->common.skip_sw is not set, the operation could

instead redirect to the upstream port and let the software or upstream

switch(es) handle the forward, but that is not addressed here.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References