CVE-2026-97541
Received Received - Intake

Memory Corruption in Linux Kernel Ath9k HTC Driver

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store usb_device_id usb_device_id is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driver_data can be easily retrieved from usb_device, so just store driver_data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97541
EUVD
EUVD-2026-86849

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the ath9k_htc Wi-Fi driver storing usb_device_id which may not persist beyond the probe phase due to dynamic ID handling. The fix suggests storing only driver_data instead, as other required information can be retrieved from the usb_device itself.

Detection Guidance

This vulnerability is specific to the Linux kernel's ath9k_htc Wi-Fi driver and does not have a direct detection method via network or system commands. It is resolved by ensuring the driver does not store usb_device_id. Check if your kernel version includes the fix by running uname -r and comparing it to patched versions.

Impact Analysis

This vulnerability could lead to driver instability or failure during Wi-Fi device probing if usb_device_id is accessed after it becomes invalid. This may cause connectivity issues or system crashes when using affected Atheros Wi-Fi devices.

Mitigation Strategies

Update your Linux kernel to a version that includes the fix for this vulnerability. This typically involves running your system's package manager to install the latest kernel updates, then rebooting to apply the changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97541. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart