---
id: CVE-2026-97982
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: cortina: Fix budget accounting

  The gmac_rx() function returns the remaining NAPI budget, but its
  caller treats the return value as the number of packets…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ethernet: cortina: Fix budget accounting

  The gmac_rx() function returns the remaining NAPI budget, but its
  caller treats the return value as the number of packets…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    631c47e2e1154f2741c555b91df1b8cb99294c6a
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    0ef8eaef5806c84db2334111d6f299c246a592bc
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    94e06e12a376710587cfeea481b65e7c49747003
  - >-
    Linux >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <
    a0de06d0da78a3db53de65dfd7452cc6d111f703
  - Linux 4.16
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T11:17:26.230'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97982'
references:
  - url: 'https://git.kernel.org/stable/c/0ef8eaef5806c84db2334111d6f299c246a592bc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/631c47e2e1154f2741c555b91df1b8cb99294c6a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/94e06e12a376710587cfeea481b65e7c49747003'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a0de06d0da78a3db53de65dfd7452cc6d111f703'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T11:06:38.867Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Fix budget accounting

The gmac_rx() function returns the remaining NAPI budget, but its
caller treats the return value as the number of packets received. An
idle poll therefore reports a full budget and remains scheduled.

Return the number of received packets instead. Preserve the existing
free queue refill accounting by adding that count directly; continuing
to subtract it from the budget would invert the refill behavior.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.