CVE Database›Document archive›CVE-2026-98275

CVE-2026-98275

kernel: kernel: Denial of Service via improper interrupt acknowledgment in Cortina Ethernet driver

Loading…

Severity

Important

Red Hat Product Security

7.5

CVSS 3.1

Review impact separately from score.

Published · October 6, 2026

Updated · November 3, 2026

Description

A flaw was found in the Linux kernel's Cortina Ethernet driver. This flaw may result in a Denial of Service (DoS) when a network receive buffer overrun occurs. Due to an incorrect bit calculation, the interrupt service routine acknowledges the wrong register bit, leaving the overrun interrupt uncleared. An attacker capable of sending high volumes of network traffic could trigger this flaw, potentially causing an interrupt storm that leads to system degradation or unresponsiveness.

Statement

Red Hat rates this vulnerability as Important because an unauthenticated remote attacker could induce an uncleared interrupt loop under high network load, resulting in a complete host denial of service. In typical Red Hat enterprise environments, the affected Cortina Gemini network driver is not required, as standard server installations run on general-purpose enterprise hardware architectures. Exploitation requires the system to be equipped with and actively running the specific Cortina network interface controller, limiting real-world exposure across standard Red Hat deployments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 · Loop with Unreachable Exit Condition