CVE-2026-97435

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sja1105 flower implementation where the dsa port from netdev() function may return a valid port belonging to a different switch chip. If another chip's port index is programmed into the local hardware, it can lead to traffic being redirected to the wrong port or cause an out-of-bounds access if the index exceeds the local chip's port count.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.