CVE-2026-98275

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register. Acknowledge the same per-port RX overrun bit that was detected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98275

EUVD

EUVD-2026-93203

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Linux	Linux	4.16

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of RX overrun interrupts in the Cortina Ethernet driver. The RX overrun interrupt is detected in interrupt status register 4 but is incorrectly acknowledged using the RX descriptor error bit from status register 0. This causes the wrong bit to be cleared, leading to improper interrupt handling for GMAC0 and GMAC1 ports.

Detection Guidance

This vulnerability involves incorrect handling of RX overrun interrupts in the Linux kernel's Cortina Ethernet driver. Detection requires checking kernel logs for interrupt handling errors or RX overrun events in the Cortina GMAC driver. Monitor dmesg or journalctl for errors related to gmac_irq or RX descriptor issues.

Impact Analysis

This vulnerability may cause network performance issues or packet loss due to improper handling of RX overrun conditions. It could lead to instability in network communication, affecting systems relying on the Cortina Ethernet driver for network connectivity.

Compliance Impact

This vulnerability affects network packet handling in the Linux kernel's ethernet driver, which could lead to data corruption or loss during high traffic. While it does not directly impact compliance with GDPR or HIPAA, it may indirectly affect data integrity and availability requirements under these regulations.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the RX overrun interrupt handling issue in the Cortina GMAC driver.

Hi! I’m here to help you understand CVE-2026-98275. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70