All vulnerabilities
CVE-2026-97541

Linux: wifi: ath9k_htc: don't store usb_device_id

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in664ef8ce390fa6575c3a3dc003f9ccdd7cca9932Also 8cb99d4a715939b9fcea3341b08eaf4b9e0cc44b, 8e70a6785bd02cf9ef7fd21ebccf46a8ba23014e and 2 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 664ef8ce390fa6575c3a3dc003f9ccdd7cca9932LinuxCVE List
  • 8cb99d4a715939b9fcea3341b08eaf4b9e0cc44bLinuxCVE List
  • 8e70a6785bd02cf9ef7fd21ebccf46a8ba23014eLinuxCVE List
  • 9d5e396578097d02e859798207db41ed4b831f50LinuxCVE List
  • 14d2ac442d660e112efc0ce87ad10085013ed2b1LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath9k_htc: don't store usb_device_id

usb_device_id is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driver_data can be easily retrieved from usb_device, so just store driver_data.

Text from CVE List

Affected versions 14

  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before 664ef8ce390fa6575c3a3dc003f9ccdd7cca9932CVE List
  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before 8cb99d4a715939b9fcea3341b08eaf4b9e0cc44bCVE List
  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before 8e70a6785bd02cf9ef7fd21ebccf46a8ba23014eCVE List
  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before 9d5e396578097d02e859798207db41ed4b831f50CVE List
  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before c34aa59950597e3360e9cef9d08cdf4edb30ad4dCVE List
  • Linuxaffected: 0ed7b93e307fd02188a33b80897069d3acc76485 before 14d2ac442d660e112efc0ce87ad10085013ed2b1CVE List
  • Linuxaffected: 3.4CVE List
  • Linuxunaffected: all versions before 3.4CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6