CVE-2026-63982
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop<br />
<br />
When mirred redirects to ingress (from either ingress or egress) the loop<br />
state from sched_mirred_dev array dev is lost because of 1) the packet<br />
deferral into the backlog and 2) the fact the sched_mirred_dev array is<br />
cleared. In such cases, if there was a loop we won&#39;t discover it.<br />
<br />
Here&#39;s a simple test to reproduce:<br />
ip a add dev port0 10.10.10.11/24<br />
<br />
tc qdisc add dev port0 clsact<br />
tc filter add dev port0 egress protocol ip \<br />
prio 10 matchall action mirred ingress redirect dev port1<br />
<br />
tc qdisc add dev port1 clsact<br />
tc filter add dev port1 ingress protocol ip \<br />
prio 10 matchall action mirred egress redirect dev port0<br />
<br />
ping -c 1 -W0.01 10.10.10.10



