vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97982

net: ethernet: cortina: Fix budget accounting

N/A
Published: September 25, 2026 at 10:23 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmac_rx() function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remains scheduled. Return the number of received packets instead. Preserve the existing free queue refill accounting by adding that count directly; continuing to subtract it from the budget would invert the refill behavior.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.164d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Vendor states this is fixed in 0ef8eaef5806c84db2334111d6f299c246a592bc (fixed)
Vendor states this is fixed in 4ca84049c6428c665ef7c903a32a99ed0f1e01e9 (fixed)
Vendor states this is fixed in 631c47e2e1154f2741c555b91df1b8cb99294c6a (fixed)
Vendor states this is fixed in 94e06e12a376710587cfeea481b65e7c49747003 (fixed)
Vendor states this is fixed in a0de06d0da78a3db53de65dfd7452cc6d111f703 (fixed)
Vendor states this is fixed in aa339ac334d4e51f43af9d2901e6faf11ffd981e (fixed)
Vendor states this is fixed in d3deb54d9507c2d7f05efd896142095eef5b7d85 (fixed)
Vendor states this is fixed in e6e5732b90d0fc25fd3d9961ff61e660297d7608 (fixed)
Vendor states this is fixed in 4.16 (unaffected)
Vendor states this is fixed in 5.10.271 (unaffected)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a
Source: cverecord
https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc
Source: cverecord
https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003
Source: cverecord
https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703
Source: cverecord
https://git.kernel.org/stable/c/d3deb54d9507c2d7f05efd896142095eef5b7d85
Source: cverecord
https://git.kernel.org/stable/c/e6e5732b90d0fc25fd3d9961ff61e660297d7608
Source: cverecord
https://git.kernel.org/stable/c/aa339ac334d4e51f43af9d2901e6faf11ffd981e
Source: cverecord
https://git.kernel.org/stable/c/4ca84049c6428c665ef7c903a32a99ed0f1e01e9

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card