CVE-2026-97981EPSS p6.5%
CVE-2026-97981CVE-2026-97981
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Count dropped frames as NAPI work
The RX loop only consumes budget when it successfully delivers a frame.
Error paths keep consuming descriptors without reducing the budget, so a
stream of bad frames can process the entire receive ring in one poll.
Move the budget accounting to a common end-of-frame path. This counts
each completed frame as NAPI work whether it was delivered or dropped,
matching the behavior of the vendor driver.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 6.5% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |