CVE-2026-98597

Received Received - Intake

USB Receive Buffer Overflow in Linux Kernel sr9700 Driver

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that payload length against the whole remaining receive buffer. The following copy starts after the three-byte header, and the cursor advance consumes both that header and the four-byte CRC. Require the payload to fit after SR_RX_OVERHEAD before copying it or advancing to the next packet. The loop already ensures that the remaining buffer is larger than the overhead, so the subtraction is safe. The issue was found by our static-analysis tool.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98597

EUVD

EUVD-2026-103642

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	c9b37458e95629b1d1171457afdcc1bf1eb7881d
Linux	Linux	3.12

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a network USB driver (sr9700) where a receive fixup incorrectly checks packet length. The fix subtracts Ethernet CRC from the packet length but compares it against the entire receive buffer. This can lead to buffer overflows or incorrect data handling during packet processing.

Detection Guidance

This vulnerability affects the Linux kernel's sr9700 USB network device driver. Detection requires checking if the affected driver is present and analyzing kernel logs for related errors. Use commands like 'lsmod | grep sr9700' to check if the driver is loaded and 'dmesg | grep sr9700' to review kernel messages for anomalies.

Impact Analysis

This vulnerability could allow attackers to cause denial-of-service conditions, corrupt data, or potentially execute arbitrary code on affected systems. It primarily affects systems using the sr9700 USB network adapter driver.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level network driver issue in the Linux kernel. It may indirectly impact compliance if exploited to cause denial-of-service or data corruption, but no evidence suggests direct regulatory impact.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the sr9700 USB network interface vulnerability.

Hi! I’m here to help you understand CVE-2026-98597. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70