CVE-2026-98697

Source
https://cve.org/CVERecord?id=CVE-2026-98697
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98697.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98697
Downstream
Published
2026-10-18T15:46:22Z
Modified
2026-10-20T02:30:37Z
Summary
USB: serial: fix dynamic id driver deregistration race
Details

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race

Only free the dynamic ids after having deregistered the driver and removed the "new_id" attribute to avoid leaking any id added by a racing write to the attribute.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98697.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
93bacefc4cc0b53e1cb6a336d43847154fdf6886
Fixed
ebd8fcaaacb66c15ae7e19d14619abe3762e0701
Fixed
4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81
Fixed
380f57cd58e26e0f3687451196ec446c473c52d9
Fixed
63594e8ffe097bc0b7639936f33799a7653dded2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98697.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.21
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98697.json"