---
id: CVE-2026-97982
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: cortina: Fix budget accounting

  The gmac_rx() function returns the remaining NAPI budget, but its
  caller treats the return value as the number of packets…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: cortina: Fix budget accounting

  The gmac_rx() function returns the remaining NAPI budget, but its
  caller treats the return value as the number of packets…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-835
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    d3deb54d9507c2d7f05efd896142095eef5b7d85
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    e6e5732b90d0fc25fd3d9961ff61e660297d7608
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    aa339ac334d4e51f43af9d2901e6faf11ffd981e
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    4ca84049c6428c665ef7c903a32a99ed0f1e01e9
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    631c47e2e1154f2741c555b91df1b8cb99294c6a
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    0ef8eaef5806c84db2334111d6f299c246a592bc
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    94e06e12a376710587cfeea481b65e7c49747003
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    a0de06d0da78a3db53de65dfd7452cc6d111f703
  - Linux 4.16
published: '2026-09-25'
updated: '2026-10-03'
sourceUpdated: '2026-10-03T11:18:22.263'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97982'
references:
  - url: 'https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4ca84049c6428c665ef7c903a32a99ed0f1e01e9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aa339ac334d4e51f43af9d2901e6faf11ffd981e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3deb54d9507c2d7f05efd896142095eef5b7d85'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e6e5732b90d0fc25fd3d9961ff61e660297d7608'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97982.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-97982'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2541023'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-97982'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97982'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97982.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.00176
epssPercentile: 0.07123
cvssSource: vendor
ingestedAt: '2026-09-25T11:06:38.867Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Fix budget accounting

The gmac_rx() function returns the remaining NAPI budget, but its
caller treats the return value as the number of packets received. An
idle poll therefore reports a full budget and remains scheduled.

Return the number of received packets instead. Preserve the existing
free queue refill accounting by adding that count directly; continuing
to subtract it from the budget would invert the refill behavior.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-30 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97982.json)