CVE-2026-97981

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97981
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97981.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-97981
Downstream
Related
Published
2026-09-25T10:23:17Z
Modified
2026-10-09T17:26:56Z
Summary
net: ethernet: cortina: Count dropped frames as NAPI work
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Count dropped frames as NAPI work

The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can process the entire receive ring in one poll.

Move the budget accounting to a common end-of-frame path. This counts each completed frame as NAPI work whether it was delivered or dropped, matching the behavior of the vendor driver.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97981.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88
Fixed
620b7184808b25cf58268856f892b9ba83c181fd
Fixed
9620e2ce9b5998ebbf157241f296f8ddb92285c2
Fixed
27b5753077d1cfda5fe201d2ba602de76a9a09b1
Fixed
e858b9b1ea3cbbc353189d07dec40dc16967e290
Fixed
58140f1cebb776d174dc6ff41c15401654a5b1ea
Fixed
cceb6cd7f0e5ed2944a9ca22443d7b9da82f60ab
Fixed
5754e0c0758805096ecfeaf4c1b146ad51ed246f
Fixed
b856c552f556bc0341c1dbe0bf88e630fd1dc4b7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97981.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97981.json"