Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98697

USB: serial: fix dynamic id driver deregistration race

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids after having deregistered the driver and removed the "new_id" attribute to avoid leaking any id added by a racing write to the attribute.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to < 29172161236154f362e35694864cacbdeb07d060affected
  • 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to < ebd8fcaaacb66c15ae7e19d14619abe3762e0701affected
  • 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to < 4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81affected
  • 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to < 380f57cd58e26e0f3687451196ec446c473c52d9affected
  • 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to < 63594e8ffe097bc0b7639936f33799a7653dded2affected

Linux Linux

Default version status: affected

  • 2.6.21affected
  • 0 to < 2.6.21unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References