{"id":"CVE-2026-98697","kind":"vulnerability","aliases":["CVE-2026-98697"],"related":[],"title":"Linux kernel USB serial: dynamic ID race can leak device IDs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix dynamic id driver deregistration race\n\nOnly free the dynamic ids after having deregistered the driver and\nremoved the \"new_id\" attribute to avoid leaking any id added by a racing\nwrite to the attribute.","summary":"A race in the Linux kernel USB serial driver lets a write to the new_id attribute add an ID after the dynamic IDs were freed, so memory can leak. The sources describe a memory leak during driver deregistration, not code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","usb-serial"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:23+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:18:57+00:00","updated_at":"2026-10-25T05:18:57+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:18:57Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel USB serial: dynamic ID race can leak device IDs","impact":"low","summary":"A race in the Linux kernel USB serial driver lets a write to the new_id attribute add an ID after the dynamic IDs were freed, so memory can leak. The sources describe a memory leak during driver deregistration, not code execution.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","usb-serial"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory leaks during driver deregistration; no code execution described","analyst_note":"Check the kernel.org stable commit for affected and fixed kernel versions, and whether writing new_id needs root.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running a Linux kernel with the USB serial driver that includes this change are potentially affected; the sources do not name the affected kernel versions. Systems without USB serial devices or without this kernel build are unlikely to be exposed. Whether an unprivileged user can trigger the race is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00055,"input_tokens":3308,"output_tokens":438,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98697':14A,17A 'add':42B,106C 'attribut':41B,100C,113C 'avoid':102C 'code':65B 'cve':12A,15A 'deregist':92C 'deregistr':63B,83C 'describ':57B 'devic':10A 'driver':33B,62B,82C,94C 'dynam':5A,47B,80C,88C 'execut':66B 'fix':79C 'follow':72C 'free':86C 'freed':50B 'id':6A,11A,40B,44B,48B,81C,89C,99C,105C 'infrastructur':18B 'kernel':2A,21B,30B,70C 'leak':9A,54B,60B,103C 'let':34B 'linux':1A,20B,29B,69C 'linux-kernel':19B 'memori':52B,59B 'new':39B,98C 'race':7A,26B,84C,109C 'remov':96C 'resolv':76C 'serial':4A,24B,32B,78C 'sourc':56B 'usb':3A,23B,31B,77C 'usb-seri':22B 'vulner':73C 'write':36B,110C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the USB serial driver that includes this change are potentially affected; the sources do not name the affected kernel versions. Systems without USB serial devices or without this kernel build are unlikely to be exposed. Whether an unprivileged user can trigger the race is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98697","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98697","severity":null,"published_at":"2026-10-18T16:17:23+00:00","modified_at":"2026-10-21T13:21:37+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}