CVE-2026-98275: net: ethernet: cortina: Ack RX overrun interrupt correctly
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Ack RX overrun interrupt correctly
The RX overrun interrupt is reported in interrupt status register 4, but gmacirq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register.
Acknowledge the same per-port RX overrun bit that was detected.
Affected Software
Event History
Frequently Asked Questions
Which systems are affected by this issue?
The issue is in the Linux kernel Cortina Ethernet GMAC interrupt handler. It affects handling of RX overrun interrupts on GMAC0 and GMAC1.
What happens when an RX overrun interrupt occurs?
The handler acknowledges the interrupt using the wrong status-register bit. On GMAC0 it can acknowledge the GMAC1 overrun bit instead, while on GMAC1 the shifted value does not set a bit in the 32-bit register.
How is the issue addressed?
The fix acknowledges the same per-port RX overrun bit that was detected in interrupt status register 4.