CVE-2026-97541 PUBLISHED

wifi: ath9k_htc: don't store usb_device_id

Assigner: Linux
Reserved: 24.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath9k_htc: don't store usb_device_id

usb_device_id is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driver_data can be easily retrieved from usb_device, so just store driver_data.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8e70a6785bd02cf9ef7fd21ebccf46a8ba23014e (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 9d5e396578097d02e859798207db41ed4b831f50 (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to c34aa59950597e3360e9cef9d08cdf4edb30ad4d (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 14d2ac442d660e112efc0ce87ad10085013ed2b1 (excl.)
  • affected from 0 to 6.12.111 (excl.)
  • affected from 0 to 6.18.53 (excl.)
  • affected from 0 to 7.2.7 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 6.12.111 to 6.12.* (incl.)
  • unaffected from 6.18.53 to 6.18.* (incl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References