CVE-2026-98275net: ethernet: cortina: Ack RX overrun interrupt correctly
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register. Acknowledge the same per-port RX overrun bit that was detected.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 1163cc82dcbc145f912bf2106ab668762f53e483; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 12a0c7bb448c1899ea3d8f97fa47a8740044e16d; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before d72d87926ca33c6766dc73ace46859d7220a45bb; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 472493d1d3334d104b9873abc1c2d80ed3b144f3; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 builds before 2f23fa11fef9b4a93335894379d82238f0a28228; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before 4f33e036e827f368cdb10bcb15ad098448aca0f5; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 before d4bd670454390aab72ab9fb7b73bce2966c33fe3; 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 builds before 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e | CNA record |
References
- https://git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483
- https://git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d
- https://git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb
- https://git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3
- https://git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228
- https://git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5
- https://git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3
- https://git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.