{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97982", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:18:58.208Z", "datePublished": "2026-09-25T10:23:18.304Z", "dateUpdated": "2026-09-25T10:23:18.304Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-25T10:23:18.304Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets received. An\nidle poll therefore reports a full budget and remains scheduled.\n\nReturn the number of received packets instead. Preserve the existing\nfree queue refill accounting by adding that count directly; continuing\nto subtract it from the budget would invert the refill behavior."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "631c47e2e1154f2741c555b91df1b8cb99294c6a", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "0ef8eaef5806c84db2334111d6f299c246a592bc", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "94e06e12a376710587cfeea481b65e7c49747003", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "a0de06d0da78a3db53de65dfd7452cc6d111f703", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.3-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a"}, {"url": "https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc"}, {"url": "https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003"}, {"url": "https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703"}], "title": "net: ethernet: cortina: Fix budget accounting", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "631c47e2e1154f2741c555b91df1b8cb99294c6a", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "0ef8eaef5806c84db2334111d6f299c246a592bc", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "94e06e12a376710587cfeea481b65e7c49747003", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "a0de06d0da78a3db53de65dfd7452cc6d111f703", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"lessThan": "4.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets received. An\nidle poll therefore reports a full budget and remains scheduled.\n\nReturn the number of received packets instead. Preserve the existing\nfree queue refill accounting by adding that count directly; continuing\nto subtract it from the budget would invert the refill behavior."}], "id": "CVE-2026-97982", "lastModified": "2026-09-25T11:17:26.230", "metrics": {}, "published": "2026-09-25T11:17:26.230", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: ethernet: cortina: Fix budget accounting", "id": "2541023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541023"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-835", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: ethernet: cortina: Fix budget accounting\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets received. An\nidle poll therefore reports a full budget and remains scheduled.\nReturn the number of received packets instead. Preserve the existing\nfree queue refill accounting by adding that count directly; continuing\nto subtract it from the budget would invert the refill behavior.", "A flaw was found in the Cortina Ethernet driver in the Linux kernel. The driver incorrectly returns the remaining packet budget instead of the number of packets processed during receive polling. This miscalculation causes idle network polling routines to remain continuously scheduled, which can lead to excessive processor consumption and a Denial of Service (DoS)."], "name": "CVE-2026-97982", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97982\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97982\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97982.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,631c47e2e1154f2741c555b91df1b8cb99294c6a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,0ef8eaef5806c84db2334111d6f299c246a592bc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,94e06e12a376710587cfeea481b65e7c49747003)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,a0de06d0da78a3db53de65dfd7452cc6d111f703)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T17:15:15.316437+00:00", "updated": "2026-10-01T06:30:01.900420+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}