-

CVE-2026-63982

net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop

When mirred redirects to ingress (from either ingress or egress) the loop
state from sched_mirred_dev array dev is lost because of 1) the packet
deferral into the backlog and 2) the fact the sched_mirred_dev array is
cleared. In such cases, if there was a loop we won't discover it.

Here's a simple test to reproduce:
ip a add dev port0 10.10.10.11/24

tc qdisc add dev port0 clsact
tc filter add dev port0 egress protocol ip \
   prio 10 matchall action mirred ingress redirect dev port1

tc qdisc add dev port1 clsact
tc filter add dev port1 ingress protocol ip \
   prio 10 matchall action mirred egress redirect dev port0

ping -c 1 -W0.01 10.10.10.10
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 906736728cea480a85803c67fafb1b0e78491922
Version < 66f4607fe788fc7d81bce0e2f7b3726ed2f71284
Status affected
Version fe946a751d9b52b7c45ca34899723b314b79b249
Version < 45ac526a0d5733c3695946bd84ec57f24d8f5e66
Status affected
Version fe946a751d9b52b7c45ca34899723b314b79b249
Version < db875221ab08d213a83bf30196ae8b64d55a3403
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.19
Status affected
Version 0
Version < 6.19
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.098
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/66f4607fe788fc7d81bce0e2f7b3726ed2f71284
https://git.kernel.org/stable/c/45ac526a0d5733c3695946bd84ec57f24d8f5e66
https://git.kernel.org/stable/c/db875221ab08d213a83bf30196ae8b64d55a3403