CVE-2026-97541: wifi: ath9k_htc: don't store usb_device_id
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9khtc: don't store usbdeviceid
usbdeviceid is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driverdata can be easily retrieved from usbdevice, so just store driverdata.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel ath9k_htc driver, do not store usb_device_id; store driver_data instead, since usb_device_id is not guaranteed to live longer than probe.
Event History
Frequently Asked Questions
What condition is required for this issue to occur?
The issue depends on the ath9k_htc driver handling a USB device ID whose lifetime does not extend beyond the driver's probe operation, such as a dynamic ID. Storing that usb_device_id can leave the driver with an invalid reference.
What should be checked to determine whether a system needs the fix?
Check whether the running Linux kernel includes one of the referenced stable commits that changes ath9k_htc to retain only driver_data rather than the usb_device_id. Systems using ath9k_htc with dynamically added USB IDs are the relevant exposure scenario.