CVE-2026-98497 net/mlx5e: fix swapped IPv6 IPsec policy masks

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the corresponding masks independently, but setupfteaddr6 installs each mask in...

CVE-2026-98497

The Linux kernel contains a vulnerability in the net/mlx5e driver where IPv6 IPsec policy masks are swapped. Specifically, while mlx5e_ipsec_policy_mask() builds masks independently, setup_fte_addr6() incorrectly installs them into opposite address fields. When IPv6 XFRM policies use different so...