CVE-2026-97982

net: ethernet: cortina: Fix budget accounting

State: Published
Severity: Not scored
Published: Sep 25, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Fix budget accounting

The gmac_rx() function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remains scheduled.

Return the number of received packets instead. Preserve the existing free queue refill accounting by adding that count directly; continuing to subtract it from the budget would invert the refill behavior.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before d3deb54d9507c2d7f05efd896142095eef5b7d85Affected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before e6e5732b90d0fc25fd3d9961ff61e660297d7608Affected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before aa339ac334d4e51f43af9d2901e6faf11ffd981eAffected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 4ca84049c6428c665ef7c903a32a99ed0f1e01e9Affected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 631c47e2e1154f2741c555b91df1b8cb99294c6aAffected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 0ef8eaef5806c84db2334111d6f299c246a592bcAffected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 94e06e12a376710587cfeea481b65e7c49747003Affected 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before a0de06d0da78a3db53de65dfd7452cc6d111f703Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2.7 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before d3deb54d9507c2d7f05efd896142095eef5b7d85Affected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before e6e5732b90d0fc25fd3d9961ff61e660297d7608Affected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before aa339ac334d4e51f43af9d2901e6faf11ffd981eAffected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 4ca84049c6428c665ef7c903a32a99ed0f1e01e9Affected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 631c47e2e1154f2741c555b91df1b8cb99294c6aAffected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 0ef8eaef5806c84db2334111d6f299c246a592bcAffected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before 94e06e12a376710587cfeea481b65e7c49747003Affected
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to before a0de06d0da78a3db53de65dfd7452cc6d111f703Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2.7 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.