CVE-2026-98275 PUBLISHED

net: ethernet: cortina: Ack RX overrun interrupt correctly

Assigner: Linux
Reserved: 25.09.2026 Published: 06.10.2026 Updated: 06.10.2026

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Ack RX overrun interrupt correctly

The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register.

Acknowledge the same per-port RX overrun bit that was detected.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 1163cc82dcbc145f912bf2106ab668762f53e483 (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 12a0c7bb448c1899ea3d8f97fa47a8740044e16d (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to d72d87926ca33c6766dc73ace46859d7220a45bb (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 472493d1d3334d104b9873abc1c2d80ed3b144f3 (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 2f23fa11fef9b4a93335894379d82238f0a28228 (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 4f33e036e827f368cdb10bcb15ad098448aca0f5 (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to d4bd670454390aab72ab9fb7b73bce2966c33fe3 (excl.)
  • affected from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.16 is affected
  • unaffected from 0 to 4.16 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.54 to 6.18.* (incl.)
  • unaffected from 7.2.8 to 7.2.* (incl.)
  • unaffected from 7.3-rc4 to * (incl.)

References