[ CVE-2026-98697 · Published 18 Oct 2026 ]
Vulnerability in Linux
Not scored yet
EPSS <1%1 agency advisoryNo fix listed yet
[ Description ]Official description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids after having deregistered the driver and removed the "new_id" attribute to avoid leaking any id added by a racing write to the attribute.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-4019
Linux Kernel: Multiple vulnerabilities Translated from German
[ References ]References
- git.kernel.org/stable/c/29172161236154f362e35694864cacbdeb07d060
- git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9
- git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81
- git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2
- git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701