CVE-2026-97435

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: dsa: sja1105: flower: reject cross-chip redirect<br /> <br /> dsa_port_from_netdev() may return a valid port from a different switch<br /> chip. Programming another chip&amp;#39;s port index into the local hardware<br /> causes redirection to the wrong port, or an out-of-bounds access if the<br /> index exceeds the local chip&amp;#39;s port count.<br /> <br /> Apply a minimal fix that adds a check to catch this case and adjusts the<br /> extack message. When cls-&gt;common.skip_sw is not set, the operation could<br /> instead redirect to the upstream port and let the software or upstream<br /> switch(es) handle the forward, but that is not addressed here.