CVE-2026-97435

A flaw was found in the Linux kernel's sja1105 network switch driver. When configuring traffic control redirect actions, the driver does not verify whether the destination port belongs to the local switch device. A local privileged user could exploit this flaw by configuring a cross-chip redirect, causing the driver to program an invalid port index into the hardware. This issue can lead to packets being routed to an incorrect port or an out-of-bounds access that results in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.