In the Linux kernel, a function that converts a network device back to a DSA port can return a port from a different switch chip. When a packet’s classification logic uses the returned port index to program the local hardware, the switch may be redirected to an unintended port, or, if the index exceeds the local chip’s port count, the operation can read or write memory outside the intended bounds. This can corrupt kernel memory and potentially crash the network stack, affecting all traffic that relies on the affected switch hardware. The vulnerability is a typical out‑of‑bounds access that could be leveraged by a privileged local attacker to cause a denial of service or, in the worst case, to subvert kernel execution.

The flaw exists in the Linux kernel source and affects any system running a kernel that includes the "net:dsa:sja1105" driver without the patched boundary check. The specific vendor is Linux; version information is not explicitly listed but any kernel including the relevant driver before the patch is impacted.

The CVSS score is not provided, and the EPSS score is currently missing, so the exact likelihood of exploitation is unknown. The issue is not listed in the CISA KEV catalog. Based on the description, the likely attack vector would involve sending specially crafted traffic that triggers the misinterpreted port index during packet classification or traffic shaping. While the CVE does not expressly state that arbitrary code execution is possible, the out‑of‑bounds memory access could lead to kernel crash and, depending on system configuration, might be escalated to privilege escalation if memory corruption is leveraged further.