Is there a patch available for EUVD-2026-93203?

Yes, a patch is available for EUVD-2026-93203. Update the affected software to the latest version immediately.

Linux EUVD-2026-93203

| CVE-2026-98275

2026-10-06 Linux

GHSA-pxvw-xq3p-q24h

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Ack RX overrun interrupt correctly

The RX overrun interrupt is reported in interrupt status register 4, but gmac_irq() acknowledges it using the RX descriptor error bit from status register 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1 the shift leaves no bit in the 32-bit register.

Acknowledge the same per-port RX overrun bit that was detected.

Affected VersionsENISA

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <d72d87926ca33c6766dc73ace46859d7220a45bb

Linux patch: 6.18.54

Linux patch: 6.1.189

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <1163cc82dcbc145f912bf2106ab668762f53e483

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <2f23fa11fef9b4a93335894379d82238f0a28228

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <472493d1d3334d104b9873abc1c2d80ed3b144f3

Linux patch: 7.3-rc4

Linux 4.16

Linux patch: 5.10.271

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <12a0c7bb448c1899ea3d8f97fa47a8740044e16d

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <d4bd670454390aab72ab9fb7b73bce2966c33fe3

Linux patch: 6.12.112

Linux patch: 5.15.222

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <4f33e036e827f368cdb10bcb15ad098448aca0f5

Linux patch: 0

Linux patch: 6.6.158

Linux patch: 7.2.8

Linux 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 <1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 06, 2026 - 10:02 EUVD

CVE Published

Oct 06, 2026 - 08:45 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 89% exploitable

Threat Intel

1 sources

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS NEWS MSRC

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.