CVE-2026-97540
net: usb: pegasus: don't rely on id table pointer arithmetic
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usb_device_id parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. Instead of keeping a side table for additional information, use driver_info field of the usb_device_id. The dynamic ID parsing code needs to be updated for this; convert it to just write to the reserved entry for dynamic ID and remove the weird loop.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9425a13960ef38bac237608f25c9ee64ff113086 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7654812b65047349ea4c111eed42c4315a00e462 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 61b84e964a829d534f24eab4cbd4035d22b52601 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ce8101c331956bbd3e20681331dfd22eb7c1c1ea 0 < 6.12.111 0 < 6.18.53 0 < 7.2.7
Linux / Linux
All versions affected References
git.kernel.org: https://git.kernel.org/stable/c/9425a13960ef38bac237608f25c9ee64ff113086 git.kernel.org: https://git.kernel.org/stable/c/7654812b65047349ea4c111eed42c4315a00e462 git.kernel.org: https://git.kernel.org/stable/c/61b84e964a829d534f24eab4cbd4035d22b52601 git.kernel.org: https://git.kernel.org/stable/c/ce8101c331956bbd3e20681331dfd22eb7c1c1ea