CVE-2026-97539: Linux kernel · usb: xusbatm: don't rely on id table pointer arithmetic
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in fad6cab36474758abf55c6419dd79a06a27fcefc : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:44 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in fad6cab36474758abf55c6419dd79a06a27fcefc, f7db611d98b68d15661561d2cefa774208774ccc, ee4006c2175e8b50ff5d47a54bff52eb29bb1f0d +3
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in multiple Linux kernel commits. Users should update to a Linux kernel version that includes these fixes to remediate the vulnerability. Since this is a kernel-level issue, applying the official kernel patches or upgrading to a fixed kernel release is the recommended mitigation.
Description
A vulnerability in the Linux kernel's xusbatm USB driver was fixed to prevent reliance on unsafe pointer arithmetic involving dynamic USB device ID tables. The flaw caused out-of-bounds pointer arithmetic when dynamic IDs were used, which the driver could not properly support. The fix involved avoiding this pointer arithmetic and disabling dynamic ID support for xusbatm.
References
- git.kernel.org/stable/c/ee4006c2175e8b50ff5d47a54bff52eb29bb1f0d (opens in a new tab)
- git.kernel.org/stable/c/5086f5639197f321b766cec0dce383492eaf2305 (opens in a new tab)
- git.kernel.org/stable/c/fad6cab36474758abf55c6419dd79a06a27fcefc (opens in a new tab)
- git.kernel.org/stable/c/8944ef1bfda537aaf329c82e7a5f9faf61340aa9 (opens in a new tab)
- git.kernel.org/stable/c/f7db611d98b68d15661561d2cefa774208774ccc (opens in a new tab)
- git.kernel.org/stable/c/eb6cd6d3d8abeac5d7e8251b898067184afdad8a (opens in a new tab)