CVE-2026-97541wifi: ath9k_htc: don't store usb_device_id
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store usb_device_id usb_device_id is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driver_data can be easily retrieved from usb_device, so just store driver_data.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0ed7b93e307fd02188a33b80897069d3acc76485 before 664ef8ce390fa6575c3a3dc003f9ccdd7cca9932; from 0ed7b93e307fd02188a33b80897069d3acc76485 before 8cb99d4a715939b9fcea3341b08eaf4b9e0cc44b; from 0ed7b93e307fd02188a33b80897069d3acc76485 before 8e70a6785bd02cf9ef7fd21ebccf46a8ba23014e; from 0ed7b93e307fd02188a33b80897069d3acc76485 before 9d5e396578097d02e859798207db41ed4b831f50; from 0ed7b93e307fd02188a33b80897069d3acc76485 before c34aa59950597e3360e9cef9d08cdf4edb30ad4d; from 0ed7b93e307fd02188a33b80897069d3acc76485 before 14d2ac442d660e112efc0ce87ad10085013ed2b1 | CNA record |
References
- https://git.kernel.org/stable/c/664ef8ce390fa6575c3a3dc003f9ccdd7cca9932
- https://git.kernel.org/stable/c/8cb99d4a715939b9fcea3341b08eaf4b9e0cc44b
- https://git.kernel.org/stable/c/8e70a6785bd02cf9ef7fd21ebccf46a8ba23014e
- https://git.kernel.org/stable/c/9d5e396578097d02e859798207db41ed4b831f50
- https://git.kernel.org/stable/c/c34aa59950597e3360e9cef9d08cdf4edb30ad4d
- https://git.kernel.org/stable/c/14d2ac442d660e112efc0ce87ad10085013ed2b1
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.