CVE-2026-97435
Received Received - Intake

Cross-Chip Redirect Vulnerability in Linux Kernel SJA1105 DSA Flower

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa_port_from_netdev() may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or an out-of-bounds access if the index exceeds the local chip's port count. Apply a minimal fix that adds a check to catch this case and adjusts the extack message. When cls->common.skip_sw is not set, the operation could instead redirect to the upstream port and let the software or upstream switch(es) handle the forward, but that is not addressed here.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97435
EUVD
EUVD-2026-86048

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the dsa (Distributed Switch Architecture) subsystem for the sja1105 switch chip. It involves a flaw in the flower packet filtering feature where a function may incorrectly return a port from a different switch chip. This can cause traffic to be redirected to the wrong port or trigger an out-of-bounds memory access if the port index exceeds the local chip's capacity.

Detection Guidance

This vulnerability involves incorrect port redirection in the Linux kernel's DSA (Distributed Switch Architecture) for SJA1105 switches. Detection requires checking kernel logs for errors related to dsa_port_from_netdev() or flower classifier rules. Monitor logs with: dmesg | grep -i dsa or journalctl -k | grep -i dsa. Review switch configuration for misrouted traffic or unexpected port behavior.

Impact Analysis

If exploited, this vulnerability could lead to network traffic being misrouted or dropped due to incorrect port redirection. In severe cases, it might cause system crashes or unauthorized access to network segments. Systems using affected Linux kernel versions with sja1105 switches are at risk.

Mitigation Strategies

Apply the kernel patch that adds a check in dsa_port_from_netdev() to prevent cross-chip port redirection. Update the Linux kernel to a version containing the fix. If immediate patching is not possible, disable DSA flower classifier rules or restrict traffic to prevent misrouting until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97435. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart