In the Linux kernel, the following vulnerability has been resolved:
net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop
When mirred redirects to ingress (from either ingress or egress) the loop state from sched_mirred_dev array dev is lost because of 1) the packet deferral into the backlog and 2) the fact the sched_mirred_dev array is cleared. In such cases, if there was a loop we won't discover it.
Here's a simple test to reproduce: ip a add dev port0 10.10.10.11/24
tc qdisc add dev port0 clsact tc filter add dev port0 egress protocol ip \ prio 10 matchall action mirred ingress redirect dev port1
tc qdisc add dev port1 clsact tc filter add dev port1 ingress protocol ip \ prio 10 matchall action mirred egress redirect dev port0
ping -c 1 -W0.01 10.10.10.10
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Aug 10, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidiaUpgrade linux-image-azure-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-raspi-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1008-oracle-64k | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 3, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub