« Volver al listado

CVE-2026-97981

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Count dropped frames as NAPI work

The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can process the entire receive ring in one poll.

Move the budget accounting to a common end-of-frame path. This counts each completed frame as NAPI work whether it was delivered or dropped, matching the behavior of the vendor driver.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-97981",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "620b7184808b25cf58268856f892b9ba83c181fd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "9620e2ce9b5998ebbf157241f296f8ddb92285c2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "27b5753077d1cfda5fe201d2ba602de76a9a09b1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "e858b9b1ea3cbbc353189d07dec40dc16967e290",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "58140f1cebb776d174dc6ff41c15401654a5b1ea",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "5754e0c0758805096ecfeaf4c1b146ad51ed246f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88",
              "lessThan": "b856c552f556bc0341c1dbe0bf88e630fd1dc4b7",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cortina/gemini.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.16",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.271",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.222",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.7",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cortina/gemini.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-25T11:17:26.127",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/27b5753077d1cfda5fe201d2ba602de76a9a09b1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5754e0c0758805096ecfeaf4c1b146ad51ed246f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/58140f1cebb776d174dc6ff41c15401654a5b1ea",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/620b7184808b25cf58268856f892b9ba83c181fd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9620e2ce9b5998ebbf157241f296f8ddb92285c2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b856c552f556bc0341c1dbe0bf88e630fd1dc4b7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e858b9b1ea3cbbc353189d07dec40dc16967e290",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Count dropped frames as NAPI work\n\nThe RX loop only consumes budget when it successfully delivers a frame.\nError paths keep consuming descriptors without reducing the budget, so a\nstream of bad frames can process the entire receive ring in one poll.\n\nMove the budget accounting to a common end-of-frame path. This counts\neach completed frame as NAPI work whether it was delivered or dropped,\nmatching the behavior of the vendor driver."
    }
  ],
  "lastModified": "2026-10-03T11:18:22.150",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}