In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop When… (CVE-2026-63982)
A vulnerability in the Linux kernel's network scheduler (net/sched) involving mirred redirect loops between ingress and egress interfaces has been resolved. The issue occurs because the loop detection state is lost due to packet deferral and clearing of the sched_mirred_dev array, preventing discovery of mirred loops. This can cause unexpected network behavior when mirred actions redirect packets between interfaces in a loop. A test case demonstrates the loop creation using traffic control commands and ping. No CVSS score is available for this vulnerability.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-63982 involves the net/sched subsystem where mirred redirect actions create a loop between ingress and egress interfaces (ethx:ingress -> ethy:egress -> ethx:ingress). The loop detection state stored in the sched_mirred_dev array is lost due to packet deferral into the backlog and clearing of this array, causing the kernel to fail to detect the loop. This can lead to network packet processing loops that may impact network functionality. The issue has been resolved in the Linux kernel.
Potential Impact
The vulnerability causes the kernel to fail to detect mirred redirect loops between network interfaces, potentially resulting in network packet loops. This can degrade network performance or cause unexpected network behavior. There is no indication of remote code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this fix. Since no vendor advisory or patch links are provided, check the Linux kernel mailing lists or official repositories for the specific patch or updated kernel versions. No additional mitigation actions are indicated.
In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop When… (CVE-2026-63982)
Description
A vulnerability in the Linux kernel's network scheduler (net/sched) involving mirred redirect loops between ingress and egress interfaces has been resolved. The issue occurs because the loop detection state is lost due to packet deferral and clearing of the sched_mirred_dev array, preventing discovery of mirred loops. This can cause unexpected network behavior when mirred actions redirect packets between interfaces in a loop. A test case demonstrates the loop creation using traffic control commands and ping. No CVSS score is available for this vulnerability.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-63982 involves the net/sched subsystem where mirred redirect actions create a loop between ingress and egress interfaces (ethx:ingress -> ethy:egress -> ethx:ingress). The loop detection state stored in the sched_mirred_dev array is lost due to packet deferral into the backlog and clearing of this array, causing the kernel to fail to detect the loop. This can lead to network packet processing loops that may impact network functionality. The issue has been resolved in the Linux kernel.
Potential Impact
The vulnerability causes the kernel to fail to detect mirred redirect loops between network interfaces, potentially resulting in network packet loops. This can degrade network performance or cause unexpected network behavior. There is no indication of remote code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this fix. Since no vendor advisory or patch links are provided, check the Linux kernel mailing lists or official repositories for the specific patch or updated kernel versions. No additional mitigation actions are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g6rc-cvjj-cfmj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63982"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27aa2a4a8d598912defe
Added to database: 07/19/2026, 19:38:18 UTC
Last enriched: 07/19/2026, 20:01:40 UTC
Last updated: 07/20/2026, 19:17:03 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.