CVE-2026-97539
Received Received - Intake

USB Driver Memory Corruption in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usb_device_id parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. xusbatm initialize the USB device IDs dynamically so it can just use driver_info too. Even with conversion, xusbatm still cannot support dynamic IDs, so also set no_dynamic_id.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97539
EUVD
EUVD-2026-86847

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's usb xusbatm driver. It involves incorrect pointer arithmetic when handling dynamic USB device IDs. The code fails to properly manage memory when IDs are allocated on the heap, leading to out-of-bounds access. The fix removes reliance on pointer arithmetic and disables dynamic ID support entirely.

Detection Guidance

This vulnerability affects the Linux kernel's usb xusbatm driver. Detection requires checking if the affected driver is loaded and if dynamic USB IDs are enabled. Use commands like 'lsmod | grep xusbatm' to check if the driver is loaded and 'dmesg | grep xusbatm' to see if errors related to dynamic IDs are present.

Impact Analysis

This vulnerability could cause system instability or crashes if exploited. It may allow unauthorized access or privilege escalation on systems using the affected USB driver. Users might experience kernel panics or unexpected behavior when interacting with USB devices.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves this issue. If dynamic USB IDs are not required, set the 'no_dynamic_id' module parameter for xusbatm to disable dynamic ID support. Verify the fix by checking kernel logs for errors after applying changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97539. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart