{"id":"CVE-2026-97982","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"vendor":"Linux","product":"Linux","affected":["Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < d3deb54d9507c2d7f05efd896142095eef5b7d85","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < e6e5732b90d0fc25fd3d9961ff61e660297d7608","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < aa339ac334d4e51f43af9d2901e6faf11ffd981e","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < 4ca84049c6428c665ef7c903a32a99ed0f1e01e9","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < 631c47e2e1154f2741c555b91df1b8cb99294c6a","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < 0ef8eaef5806c84db2334111d6f299c246a592bc","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < 94e06e12a376710587cfeea481b65e7c49747003","Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 < a0de06d0da78a3db53de65dfd7452cc6d111f703","Linux 4.16"],"published":"2026-09-25","updated":"2026-10-03","sourceUpdated":"2026-10-03T11:18:22.263","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97982","references":[{"url":"https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4ca84049c6428c665ef7c903a32a99ed0f1e01e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/aa339ac334d4e51f43af9d2901e6faf11ffd981e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d3deb54d9507c2d7f05efd896142095eef5b7d85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e6e5732b90d0fc25fd3d9961ff61e660297d7608","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97982.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-97982"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541023"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97982"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97982"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97982.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00176,"epssPercentile":0.07123,"cvssSource":"vendor","ingestedAt":"2026-09-25T11:06:38.867Z","slug":"CVE-2026-97982","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Fix budget accounting\n\nThe gmac_rx() function returns the remaining NAPI budget, but its\ncaller treats the return value as the number of packets received. An\nidle poll therefore reports a full budget and remains scheduled.\n\nReturn the number of received packets instead. Preserve the existing\nfree queue refill accounting by adding that count directly; continuing\nto subtract it from the budget would invert the refill behavior.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-30 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97982.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":213309,"id":"CVE-2026-97982","ts":1790754686608,"field":"cvss","old":null,"new":"5.5"},{"seq":213308,"id":"CVE-2026-97982","ts":1790754686608,"field":"severity","old":"none","new":"medium"}]}