All vulnerabilities
CVE-2026-98275

Linux: net: ethernet: cortina: Ack RX overrun interrupt correctly

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1163cc82dcbc145f912bf2106ab668762f53e483Also 12a0c7bb448c1899ea3d8f97fa47a8740044e16d, 472493d1d3334d104b9873abc1c2d80ed3b144f3 and 3 moreCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 1163cc82dcbc145f912bf2106ab668762f53e483LinuxCVE List
  • 12a0c7bb448c1899ea3d8f97fa47a8740044e16dLinuxCVE List
  • 472493d1d3334d104b9873abc1c2d80ed3b144f3LinuxCVE List
  • 2f23fa11fef9b4a93335894379d82238f0a28228LinuxCVE List
  • 4f33e036e827f368cdb10bcb15ad098448aca0f5LinuxCVE List
  • 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Ack RX overrun interrupt correctly

The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register.

Acknowledge the same per-port RX overrun bit that was detected.

Text from CVE List

Affected versions 18

  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 1163cc82dcbc145f912bf2106ab668762f53e483CVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 12a0c7bb448c1899ea3d8f97fa47a8740044e16dCVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before d72d87926ca33c6766dc73ace46859d7220a45bbCVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 472493d1d3334d104b9873abc1c2d80ed3b144f3CVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 2f23fa11fef9b4a93335894379d82238f0a28228CVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 4f33e036e827f368cdb10bcb15ad098448aca0f5CVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before d4bd670454390aab72ab9fb7b73bce2966c33fe3CVE List
  • Linuxaffected: 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0eCVE List
  • Linuxaffected: 4.16CVE List
  • Linuxunaffected: all versions before 4.16CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8