CVE-2026-98697

USB: serial: fix dynamic id driver deregistration race

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race

Only free the dynamic ids after having deregistered the driver and removed the "new_id" attribute to avoid leaking any id added by a racing write to the attribute.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before e8dd520070e1d89ab2fabdd514dd2b4024fabc1fAffected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 025e149e471bfa07622b8b77050facfc9b7704b4Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 5f83c41fac8f4048f2ded4ffdd74907888a3bb91Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 29172161236154f362e35694864cacbdeb07d060Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before ebd8fcaaacb66c15ae7e19d14619abe3762e0701Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 380f57cd58e26e0f3687451196ec446c473c52d9Affected 93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 63594e8ffe097bc0b7639936f33799a7653dded2Affected
LinuxLinux	2.6.21Affected before 2.6.21Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before e8dd520070e1d89ab2fabdd514dd2b4024fabc1fAffected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 025e149e471bfa07622b8b77050facfc9b7704b4Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 5f83c41fac8f4048f2ded4ffdd74907888a3bb91Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 29172161236154f362e35694864cacbdeb07d060Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before ebd8fcaaacb66c15ae7e19d14619abe3762e0701Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 380f57cd58e26e0f3687451196ec446c473c52d9Affected
93bacefc4cc0b53e1cb6a336d43847154fdf6886 to before 63594e8ffe097bc0b7639936f33799a7653dded2Affected

LinuxLinux

2.6.21Affected
before 2.6.21Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.