CVE-2026-98697

high

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids after having deregistered the driver and removed the "new_id" attribute to avoid leaking any id added by a racing write to the attribute.

References

https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701

https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2

https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81

https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103951

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 5.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:C

Severity: Medium

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Severity: High

EPSS

EPSS: 0.00209