Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: Rounding up the PTP per-out pin duration The pinduration is converted from the period provided by the user to SJA1105 clock ticks. This value is then passed as the cycletime parameter to futurebasetime. Very...

CVE-2026-97435

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

UBUNTU-CVE-2026-97435

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

EUVD-2026-86048

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97435

The Linux kernel contains a vulnerability in the net: dsa: sja1105: flower driver where the dsa_port_from_netdev() function may return a valid port index from a different switch chip. This allows an attacker or process to program another chip's port index into the local hardware, leading to redir...

CVE-2026-97435 net: dsa: sja1105: flower: reject cross-chip redirect

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97435 net: dsa: sja1105: flower: reject cross-chip redirect

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97435: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

PT-2026-104930

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa port from netdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, ...

PT-2026-98069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sja1105 flower implementation where the dsa port from netdev function may return a valid port belonging to a different switch chip. If another chip's port index is...

Linux Distros Unpatched Vulnerability : CVE-2026-97435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105tabledeleteentry There are actually 2 problems: 1. Deleting the last element does not require moving elements. In fact, the element at position i+1 is out of bounds. 2...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2022-50040: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

CVE-2025-22107: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105tabledeleteentry There are actually 2 problems: - deleting the last element doesn't require the memmove of elements i + 1, end over it. Actually, element i+1 is out of...

CVE-2021-47158: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105setup If any of sja1105staticconfigload, sja1105clockingsetup or sja1105devlinksetup fails, we can't just return in the middle of sja1105setup or memory will leak. Add a cleanup pat...

GSD-2022-1005499 net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2021-29058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.41 Description The issue is related to the sja1105 setup function in the Linux Kernel, specifically in the net: dsa: sja1105 component. It lacks proper error handling, which may potentially lead to...