CVE-2026-97540net: usb: pegasus: don't rely on id table pointer arithmetic
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usb_device_id parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. Instead of keeping a side table for additional information, use driver_info field of the usb_device_id. The dynamic ID parsing code needs to be updated for this; convert it to just write to the reserved entry for dynamic ID and remove the weird loop.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 733260ff9c45bd4db60f45d17e8560a4a68dff4d builds before 7c940a1100cb0aa18a54dc48d736c0525c0f400c; 733260ff9c45bd4db60f45d17e8560a4a68dff4d builds before 05d47f540d85c8f6697ec5cfc1aa7b4f96a5b31b; 733260ff9c45bd4db60f45d17e8560a4a68dff4d builds before 9425a13960ef38bac237608f25c9ee64ff113086; from 733260ff9c45bd4db60f45d17e8560a4a68dff4d before 7654812b65047349ea4c111eed42c4315a00e462; 733260ff9c45bd4db60f45d17e8560a4a68dff4d builds before 61b84e964a829d534f24eab4cbd4035d22b52601; from 733260ff9c45bd4db60f45d17e8560a4a68dff4d before ce8101c331956bbd3e20681331dfd22eb7c1c1ea | CNA record |
References
- https://git.kernel.org/stable/c/7c940a1100cb0aa18a54dc48d736c0525c0f400c
- https://git.kernel.org/stable/c/05d47f540d85c8f6697ec5cfc1aa7b4f96a5b31b
- https://git.kernel.org/stable/c/9425a13960ef38bac237608f25c9ee64ff113086
- https://git.kernel.org/stable/c/7654812b65047349ea4c111eed42c4315a00e462
- https://git.kernel.org/stable/c/61b84e964a829d534f24eab4cbd4035d22b52601
- https://git.kernel.org/stable/c/ce8101c331956bbd3e20681331dfd22eb7c1c1ea
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.