UNKNOWN NVD
CVE-2026-97540
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer arithmetic The current code is broken wh
In the Linux kernel, the following vulnerability has been resolved:
net: usb: pegasus: don't rely on id table pointer arithmetic
The current code is broken when dynamic ID is involved; in such cases
usb_device_id parameter of probe lives on the heap and the pointer
arithmetic will get an index that is wildly out of bound. Instead of
keeping a side table for additional information, use driver_info field of
the usb_device_id.
The dynamic ID parsing code needs to be updated for this; convert it to
just write to the reserved entry for dynamic ID and remove the weird loop.
References
- https://git.kernel.org/stable/c/61b84e964a829d534f24eab4cbd4035d22b52601
- https://git.kernel.org/stable/c/7654812b65047349ea4c111eed42c4315a00e462
- https://git.kernel.org/stable/c/9425a13960ef38bac237608f25c9ee64ff113086
- https://git.kernel.org/stable/c/ce8101c331956bbd3e20681331dfd22eb7c1c1ea
This unknown severity vulnerability was published on 2026-09-25 via NVD.
vulnfeed aggregates 11443 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.