CVE-2026-97982
Linux: net: ethernet: cortina: Fix budget accounting
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4ca84049c6428c665ef7c903a32a99ed0f1e01e9Also 631c47e2e1154f2741c555b91df1b8cb99294c6a, 0ef8eaef5806c84db2334111d6f299c246a592bc and 1 moreCVE List
What fixes it
- 4ca84049c6428c665ef7c903a32a99ed0f1e01e9LinuxCVE List
- 631c47e2e1154f2741c555b91df1b8cb99294c6aLinuxCVE List
- 0ef8eaef5806c84db2334111d6f299c246a592bcLinuxCVE List
- 94e06e12a376710587cfeea481b65e7c49747003LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Fix budget accounting
The gmac_rx() function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remains scheduled.
Return the number of received packets instead. Preserve the existing free queue refill accounting by adding that count directly; continuing to subtract it from the budget would invert the refill behavior.
Text from CVE List
Affected versions 18
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before d3deb54d9507c2d7f05efd896142095eef5b7d85CVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before e6e5732b90d0fc25fd3d9961ff61e660297d7608CVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before aa339ac334d4e51f43af9d2901e6faf11ffd981eCVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 4ca84049c6428c665ef7c903a32a99ed0f1e01e9CVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 631c47e2e1154f2741c555b91df1b8cb99294c6aCVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 0ef8eaef5806c84db2334111d6f299c246a592bcCVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 94e06e12a376710587cfeea481b65e7c49747003CVE List
- Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before a0de06d0da78a3db53de65dfd7452cc6d111f703CVE List
- Linuxaffected: 4.16CVE List
- Linuxunaffected: all versions before 4.16CVE List
- Linuxunaffected: 5.10.271 through 5.10.*CVE List
- Linuxunaffected: 5.15.222 through 5.15.*CVE List
- Linuxunaffected: 6.1.189 through 6.1.*CVE List
- Linuxunaffected: 6.6.158 through 6.6.*CVE List
- Linuxunaffected: 6.12.111 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 8
- git.kernel.org/stable/c/d3deb54d9507c2d7f05efd896142095eef5b7d85Referencevia CVE List
- git.kernel.org/stable/c/e6e5732b90d0fc25fd3d9961ff61e660297d7608Referencevia CVE List
- git.kernel.org/stable/c/aa339ac334d4e51f43af9d2901e6faf11ffd981eReferencevia CVE List
- git.kernel.org/stable/c/4ca84049c6428c665ef7c903a32a99ed0f1e01e9Referencevia CVE List
- git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6aReferencevia CVE List
- git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bcReferencevia CVE List
- git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003Referencevia CVE List
- git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703Referencevia CVE List