CVE-2026-98275

net: ethernet: cortina: Ack RX overrun interrupt correctly

Published Oct 6, 2026 CVSS n/a EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Ack RX overrun interrupt correctly

The RX overrun interrupt is reported in interrupt status register 4, but
gmac_irq() acknowledges it using the RX descriptor error bit from status
register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1
the shift leaves no bit in the 32-bit register.

Acknowledge the same per-port RX overrun bit that was detected.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 1163cc82dcbc145f912bf2106ab668762f53e483
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 12a0c7bb448c1899ea3d8f97fa47a8740044e16d
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< d72d87926ca33c6766dc73ace46859d7220a45bb
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 472493d1d3334d104b9873abc1c2d80ed3b144f3
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 2f23fa11fef9b4a93335894379d82238f0a28228
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 4f33e036e827f368cdb10bcb15ad098448aca0f5
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< d4bd670454390aab72ab9fb7b73bce2966c33fe3
`4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88`	affected	< 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e

Linux

affected

Version	Status	Constraints
`4.16`	affected	—
`0`	unaffected	< 4.16
`5.10.271`	unaffected	≤ 5.10.*
`5.15.222`	unaffected	≤ 5.15.*
`6.1.189`	unaffected	≤ 6.1.*
`6.6.158`	unaffected	≤ 6.6.*
`6.12.112`	unaffected	≤ 6.12.*
`6.18.54`	unaffected	≤ 6.18.*
`7.2.8`	unaffected	≤ 7.2.*
`7.3`	unaffected	≤ *

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,1163cc82dcbc145f912bf2106ab668762f53e483)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,12a0c7bb448c1899ea3d8f97fa47a8740044e16d)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,d72d87926ca33c6766dc73ace46859d7220a45bb)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,472493d1d3334d104b9873abc1c2d80ed3b144f3)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,2f23fa11fef9b4a93335894379d82238f0a28228)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,4f33e036e827f368cdb10bcb15ad098448aca0f5)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,d4bd670454390aab72ab9fb7b73bce2966c33fe3)`	affected	code_commit	—
`[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e)`	affected	code_commit	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`4.16`	affected	calver	—
`[0,4.16)`	unaffected	generic	—
`[5.10.271,5.11.0)`	unaffected	semver	—
`[5.15.222,5.16.0)`	unaffected	semver	—
`[6.1.189,6.2.0)`	unaffected	semver	—
`[6.6.158,6.7.0)`	unaffected	semver	—
`[6.12.112,6.13.0)`	unaffected	semver	—
`[6.18.54,6.19.0)`	unaffected	semver	—
`[7.2.8,7.3.0)`	unaffected	semver	—
`[7.3-rc4,*]`	unaffected	generic	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4841-1	linux security update
Debian DLA	DLA-4850-1	linux-6.12 security update
Debian DSA	DSA-6568-1	linux security update
Ubuntu USN	USN-8961-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9019-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9020-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9022-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9023-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9029-1	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-9039-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.177% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483
https://git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d
https://git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e
https://git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228
https://git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3
https://git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5
https://git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3
https://git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb

History

Oct 7, 2026 5:00 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-682

Oct 6, 2026 5:00 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-749

Oct 6, 2026 4:00 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-749

Oct 6, 2026 9:00 AM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register. Acknowledge the same per-port RX overrun bit that was detected.
Title		net: ethernet: cortina: Ack RX overrun interrupt correctly
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483 https://git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d https://git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e https://git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228 https://git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3 https://git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5 https://git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3 https://git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb