CVE-2026-98275: Linux kernel · net: ethernet: cortina: Ack RX overrun interrupt correctly
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d72d87926ca33c6766dc73ace46859d7220a45bb : update Linux kernel when convenient.
Data as of 26 Oct 2026, 14:05 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in d72d87926ca33c6766dc73ace46859d7220a45bb, d4bd670454390aab72ab9fb7b73bce2966c33fe3, 472493d1d3334d104b9873abc1c2d80ed3b144f3 +5
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
This vulnerability has been fixed in the Linux kernel. Users should update to a fixed kernel version containing the relevant patches identified by the commit hashes provided. No additional mitigation steps are indicated.
Description
A vulnerability in the Linux kernel's Cortina Ethernet driver related to incorrect acknowledgment of RX overrun interrupts has been resolved. The issue involved the gmac_irq() function acknowledging the RX overrun interrupt using an incorrect status register bit, causing improper handling of the interrupt. The fix ensures that the per-port RX overrun bit that was detected is correctly acknowledged.
References
- git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483 (opens in a new tab)
- git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d (opens in a new tab)
- git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb (opens in a new tab)
- git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3 (opens in a new tab)
- git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228 (opens in a new tab)
- git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5 (opens in a new tab)
- git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3 (opens in a new tab)
- git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e (opens in a new tab)