usb: xusbatm: don't rely on id table pointer arithmetic
In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usb_device_id parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. xusbatm initialize the USB device IDs dynamically so it can just use driver_info too. Even with conversion, xusbatm still cannot support dynamic IDs, so also set no_dynamic_id.
CVE-2026-97539
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-97539
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "ee4006c2175e8b50ff5d47a54bff52eb29bb1f0d",
"versionType": "git"
},
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "5086f5639197f321b766cec0dce383492eaf2305",
"versionType": "git"
},
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "fad6cab36474758abf55c6419dd79a06a27fcefc",
"versionType": "git"
},
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "8944ef1bfda537aaf329c82e7a5f9faf61340aa9",
"versionType": "git"
},
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "f7db611d98b68d15661561d2cefa774208774ccc",
"versionType": "git"
},
{
"status": "affected",
"version": "733260ff9c45bd4db60f45d17e8560a4a68dff4d",
"lessThan": "eb6cd6d3d8abeac5d7e8251b898067184afdad8a",
"versionType": "git"
}
],
"programFiles": [
"drivers/usb/atm/xusbatm.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.16"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "2.6.16",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/usb/atm/xusbatm.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-97539
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #37989 · Revision 1
- Added to Heist Feed
- Publisher date