---
id: CVE-2026-98697
title: 'USB: serial: fix dynamic id driver deregistration race'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  USB: serial: fix dynamic id driver deregistration race

  Only free the dynamic ids after having deregistered the driver and
  removed the "new_id" attribute to avoid leaki…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    ebd8fcaaacb66c15ae7e19d14619abe3762e0701
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    380f57cd58e26e0f3687451196ec446c473c52d9
  - >-
    Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 <
    63594e8ffe097bc0b7639936f33799a7653dded2
  - Linux 2.6.21
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:46:22.503Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98697'
references:
  - url: 'https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701'
  - url: 'https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81'
  - url: 'https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9'
  - url: 'https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.516Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race

Only free the dynamic ids after having deregistered the driver and
removed the "new_id" attribute to avoid leaking any id added by a racing
write to the attribute.

## Affected

- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < ebd8fcaaacb66c15ae7e19d14619abe3762e0701`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 380f57cd58e26e0f3687451196ec446c473c52d9`
- `Linux >= 93bacefc4cc0b53e1cb6a336d43847154fdf6886 < 63594e8ffe097bc0b7639936f33799a7653dded2`
- `Linux 2.6.21`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.