In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix...
zetlyn/cve-ghsa vulnerability ghsa GHSA-f9c6-x48g-gfm4 cve CVE-2026-97982 known 2026-09-25
https://github.com/advisories/GHSA-f9c6-x48g-gfm4
Properties
| severity | unknownreceipt
What the source handed over{
"credits": [],
"cve_id": "CVE-2026-97982",
"cvss": {
"score": null,
"vector_string": null
},
"cvss_severities": {
"cvss_v3": {
"score": 0.0,
"vector_string": null
},
"cvss_v4": {
"score": 0.0,
"vector_string": null
}
},
"cwes": [],
"description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets received. An\nidle poll therefore reports a full budget and remains scheduled.\n\nReturn the number of received packets instead. Preserve the existing\nfree queue refill accounting by adding that count directly; continuing\nto subtract it from the budget would invert the refill behavior.",
"epss": {
"percentage": 0.00168,
"percentile": 0.05413
},
"ghsa_id": "GHSA-f9c6-x48g-gfm4",
"github_reviewed_at": null,
"html_url": "https://github.com/advisories/GHSA-f9c6-x48g-gfm4",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-f9c6-x48g-gfm4"
},
{
"type": "CVE",
"value": "CVE-2026-97982"
}
],
"nvd_published_at": "2026-09-25T11:17:26Z",
"published_at": "2026-09-25T12:31:31Z",
"references": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-97982",
"https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc",
"https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a",
"https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003",
"https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703",
"https://github.com/advisories/GHSA-f9c6-x48g-gfm4"
],
"repository_advisory_url": null,
"severity": "unknown",
"source_code_location": "",
"summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix...",
"type": "unreviewed",
"updated_at": "2026-09-25T12:31:34Z",
"url": "https://api.github.com/advisories/GHSA-f9c6-x48g-gfm4",
"vulnerabilities": [],
"withdrawn_at": null
} |
|---|
Text
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Fix...
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Fix budget accounting
The gmac_rx() function returns the remaining NAPI budget, but its
caller treats the return value as the number of packets received. An
idle poll therefore reports a full budget and remains scheduled.
Return the number of received packets instead. Preserve the existing
free queue refill accounting by adding that count directly; continuing
to subtract it from the budget would invert the refill behavior.