{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97981", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:18:58.208Z", "datePublished": "2026-09-25T10:23:17.703Z", "dateUpdated": "2026-09-25T10:23:17.703Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-25T10:23:17.703Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Count dropped frames as NAPI work\n\nThe RX loop only consumes budget when it successfully delivers a frame.\nError paths keep consuming descriptors without reducing the budget, so a\nstream of bad frames can process the entire receive ring in one poll.\n\nMove the budget accounting to a common end-of-frame path. This counts\neach completed frame as NAPI work whether it was delivered or dropped,\nmatching the behavior of the vendor driver."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "58140f1cebb776d174dc6ff41c15401654a5b1ea", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "5754e0c0758805096ecfeaf4c1b146ad51ed246f", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "b856c552f556bc0341c1dbe0bf88e630fd1dc4b7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.3-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/58140f1cebb776d174dc6ff41c15401654a5b1ea"}, {"url": "https://git.kernel.org/stable/c/cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab"}, {"url": "https://git.kernel.org/stable/c/5754e0c0758805096ecfeaf4c1b146ad51ed246f"}, {"url": "https://git.kernel.org/stable/c/b856c552f556bc0341c1dbe0bf88e630fd1dc4b7"}], "title": "net: ethernet: cortina: Count dropped frames as NAPI work", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "58140f1cebb776d174dc6ff41c15401654a5b1ea", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "5754e0c0758805096ecfeaf4c1b146ad51ed246f", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}, {"lessThan": "b856c552f556bc0341c1dbe0bf88e630fd1dc4b7", "status": "affected", "version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.16"}, {"lessThan": "4.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Count dropped frames as NAPI work\n\nThe RX loop only consumes budget when it successfully delivers a frame.\nError paths keep consuming descriptors without reducing the budget, so a\nstream of bad frames can process the entire receive ring in one poll.\n\nMove the budget accounting to a common end-of-frame path. This counts\neach completed frame as NAPI work whether it was delivered or dropped,\nmatching the behavior of the vendor driver."}], "id": "CVE-2026-97981", "lastModified": "2026-09-25T11:17:26.127", "metrics": {}, "published": "2026-09-25T11:17:26.127", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5754e0c0758805096ecfeaf4c1b146ad51ed246f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/58140f1cebb776d174dc6ff41c15401654a5b1ea"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b856c552f556bc0341c1dbe0bf88e630fd1dc4b7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: ethernet: cortina: Count dropped frames as NAPI work", "id": "2541184", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541184"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-770", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: ethernet: cortina: Count dropped frames as NAPI work\nThe RX loop only consumes budget when it successfully delivers a frame.\nError paths keep consuming descriptors without reducing the budget, so a\nstream of bad frames can process the entire receive ring in one poll.\nMove the budget accounting to a common end-of-frame path. This counts\neach completed frame as NAPI work whether it was delivered or dropped,\nmatching the behavior of the vendor driver.", "A flaw was found in the Cortina Gemini Ethernet driver within the Linux kernel. The network packet receive handler fails to count dropped or malformed packets against its processing budget. An attacker could exploit this vulnerability by sending a stream of invalid network frames, causing the system to consume excessive processor resources and leading to a Denial of Service (DoS)."], "name": "CVE-2026-97981", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97981\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97981\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97981.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,58140f1cebb776d174dc6ff41c15401654a5b1ea)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,5754e0c0758805096ecfeaf4c1b146ad51ed246f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88,b856c552f556bc0341c1dbe0bf88e630fd1dc4b7)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.7,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T19:30:20.154118+00:00", "updated": "2026-10-01T06:15:14.476861+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}