---
id: CVE-2026-98697
title: 'USB: serial: fix dynamic id driver deregistration race'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  USB: serial: fix dynamic id driver deregistration race

  Only free the dynamic ids after having deregistered the driver and
  removed the "new_id" attribute to avoid leaki…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    29172161236154f362e35694864cacbdeb07d060
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    ebd8fcaaacb66c15ae7e19d14619abe3762e0701
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    380f57cd58e26e0f3687451196ec446c473c52d9
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    63594e8ffe097bc0b7639936f33799a7653dded2
  - Linux 2.6.21
published: '2026-10-18'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:55:46.791Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98697'
references:
  - url: 'https://git.kernel.org/stable/c/29172161236154f362e35694864cacbdeb07d060'
  - url: 'https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701'
  - url: 'https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81'
  - url: 'https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9'
  - url: 'https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2'
tags:
  - cve.org
epss: 0.00168
epssPercentile: 0.05986
ingestedAt: '2026-10-18T16:47:32.516Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race

Only free the dynamic ids after having deregistered the driver and
removed the "new_id" attribute to avoid leaking any id added by a racing
write to the attribute.

## Affected

- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 29172161236154f362e35694864cacbdeb07d060`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < ebd8fcaaacb66c15ae7e19d14619abe3762e0701`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 380f57cd58e26e0f3687451196ec446c473c52d9`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 63594e8ffe097bc0b7639936f33799a7653dded2`
- `Linux 2.6.21`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.