In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: flower: reject cross-chip redirect
dsa_port_from_netdev() may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or an out-of-bounds access if the index exceeds the local chip's port count.
Apply a minimal fix that adds a check to catch this case and adjusts the extack message. When cls->common.skip_sw is not set, the operation could instead redirect to the upstream port and let the software or upstream switch(es) handle the forward, but that is not addressed here.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Sep 30, 2026 | Sep 24, 2026 |
| Ubuntu | — | Upgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-hwe-7.0Upgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-riscv-7.0Upgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-ibm-5.15Upgrade linux-riscvUpgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-oem-7.0 | Nov 3, 2026 | Sep 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub