Log in Start free

Vulnerability · Published Sep 25, 2026 · Assigned by Linux

CVE-2026-97539usb: xusbatm: don't rely on id table pointer arithmetic

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 88.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usb_device_id parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. xusbatm initialize the USB device IDs dynamically so it can just use driver_info too. Even with conversion, xusbatm still cannot support dynamic IDs, so also set no_dynamic_id.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.190-1DEBIAN-CVE-2026-97539
Debian:13linux6.12.111-1DEBIAN-CVE-2026-97539
Debian:14linux7.2.7-1DEBIAN-CVE-2026-97539
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-97539
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-97539
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-97539
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-97539
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-97539

Affected products (as reported)

VendorProductVersions
Linux Linux 733260ff9c45bd4db60f45d17e8560a4a68dff4d – before ee4006c2175e8b50ff5d47a54bff52eb29bb1f0d733260ff9c45bd4db60f45d17e8560a4a68dff4d – before 5086f5639197f321b766cec0dce383492eaf2305733260ff9c45bd4db60f45d17e8560a4a68dff4d – before fad6cab36474758abf55c6419dd79a06a27fcefc733260ff9c45bd4db60f45d17e8560a4a68dff4d – before 8944ef1bfda537aaf329c82e7a5f9faf61340aa9733260ff9c45bd4db60f45d17e8560a4a68dff4d – before f7db611d98b68d15661561d2cefa774208774ccc733260ff9c45bd4db60f45d17e8560a4a68dff4d – before eb6cd6d3d8abeac5d7e8251b898067184afdad8a
Linux Linux 2.6.16

References