Threats tagged 'ghsa-qrx6-pjc4-f5p5'

A vulnerability in the Linux kernel's ethernet cortina driver was resolved by changing how dropped frames are counted as NAPI work. Previously, the RX loop only consumed budget when successfully delivering a frame, allowing error paths to consume descriptors without reducing the budget. This could let a stream of bad frames process the entire receive ring in one poll. The fix moves budget accounting to a common end-of-frame path, counting each completed frame as NAPI work whether delivered or dropped.