CVE-2026-98696

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98696
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98696.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98696
Downstream
Related
Published
2026-10-18T15:46:20Z
Modified
2026-11-04T14:27:18Z
Summary
USB: serial: fix driver deregistration order
Details

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix driver deregistration order

USB serial driver modules register one driver for the USB bus and one or more drivers for the ports on the USB serial bus.

When unloading a driver module, the USB driver must be deregistered before the USB serial bus drivers so that I/O is stopped before unbinding the ports to avoid use-after-free in completion handlers accessing port data.

Note that the "new_id" attributes must first be removed to prevent new ids from being added and triggering a probe of the USB driver after it has been deregistered.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98696.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
765e0ba62613fb90f09c1b5926750df0aa56f349
Fixed
991904982827f07706c643bb0428c4b689b254e3
Fixed
7c65438e3b98bd6009af09db8c725547192cdfe0
Fixed
2f12343f39e316ff66adc84a6db3569f33b50f66
Fixed
e7ad832b1144df19cbbaaa655625c6f984e85b9f
Fixed
9b085a06a0a411b0bcdf18b61c3ebf1be1c72ffe
Fixed
a1aa474768f69ea3a70da523f00f74c264cfa10e
Fixed
428d479a0d31460fbf5969ab262ccd673f1fac01
Fixed
646e5b28b4fdbc1b828a2398d6ced2c1dd308a46

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98696.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98696.json"