CVE-2026-97982: net: ethernet: cortina: Fix budget accounting
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Fix budget accounting
The gmacrx() function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remains scheduled.
Return the number of received packets instead. Preserve the existing free queue refill accounting by adding that count directly; continuing to subtract it from the budget would invert the refill behavior.
Affected Software
Event History
Frequently Asked Questions
Which systems are affected by this issue?
The issue is in the Linux kernel's Cortina Ethernet driver, specifically its NAPI receive-poll budget accounting. Systems not using that driver are not indicated by the provided information as affected.
What is the practical impact of the faulty accounting?
When the receive poll is idle, it can report that the full NAPI budget was consumed and remain scheduled. The fix makes the receive function report the actual number of packets received and preserves the intended free-queue refill accounting.
How can I determine whether the fix is present?
Check whether your kernel includes one of the referenced stable commits: 631c47e2e1154f2741c555b91df1b8cb99294c6a, 0ef8eaef5806c84db2334111d6f299c246a592bc, or 94e06e12a376710587cfeea481b65e7c49747003.