CVE-2026-97982 Linux CVE debrief

Who should care

Linux kernel maintainers, administrators, and users of affected systems should verify and apply kernel updates to ensure correct budget accounting in the cortina ethernet component.

Why it matters

CVE-2026-97982 is a vulnerability in the Linux kernel's net: ethernet: cortina component that has been addressed. The issue involves incorrect budget accounting, which could lead to system scheduling problems. Defenders should verify and apply kernel updates, review system configurations, and monitor system logs.

• Verify kernel updates to prevent incorrect budget accounting
• Monitor system logs for potential issues related to the cortina ethernet component
• Review system configurations for affected deployments

Technical summary

The gmac_rx() function in the Linux kernel's net: ethernet: cortina component incorrectly returned the remaining NAPI budget instead of the number of packets received. This caused an idle poll to report a full budget and remain scheduled. The issue has been resolved by changing the function to return the number of received packets, preserving existing free queue refill accounting. The fix ensures correct budget accounting in the cortina ethernet component, preventing potential system scheduling problems. Linux kernel maintainers, administrators, and users of affected systems should verify and apply kernel updates to ensure correct budget accounting in the cortina ethernet component.

Defensive priority

Verify and apply kernel updates to ensure correct budget accounting in the cortina ethernet component.

Recommended defensive actions

• Verify kernel version and apply updates if necessary
• Review system configurations for affected deployments
• Monitor system logs for potential issues related to the cortina ethernet component
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source references provide details on the vulnerability and its resolution in the Linux kernel. The gmac_rx() function's incorrect return of the remaining NAPI budget instead of the number of packets received could lead to system scheduling problems. Defenders should verify and apply kernel updates, review system configurations, and monitor system logs. The issue has been resolved by changing the function to return the number of received packets, preserving existing free queue refill accounting. However, the exact,  

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.