CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can process the entire receive ring in one poll. Move the budget accounting to a common end-of-frame path. This counts each completed frame as NAPI work whether it was delivered or dropped, matching the behavior of the vendor driver.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-25)

Published

2026-09-25

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/27b5753077d1cfda5fe201d2ba602de76a9a09b1
• https://git.kernel.org/stable/c/5754e0c0758805096ecfeaf4c1b146ad51ed246f
• https://git.kernel.org/stable/c/58140f1cebb776d174dc6ff41c15401654a5b1ea
• https://git.kernel.org/stable/c/620b7184808b25cf58268856f892b9ba83c181fd
• https://git.kernel.org/stable/c/9620e2ce9b5998ebbf157241f296f8ddb92285c2

Check your stackJSON