UBUNTU-CVE-2026-97539: Low severity ubuntu/linux vulnerability
In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is broken when dynamic ID is involved; in such cases usbdeviceid parameter of probe lives on the heap and the pointer arithmetic will get an index that is wildly out of bound. xusbatm initialize the USB device IDs dynamically so it can just use driverinfo too. Even with conversion, xusbatm still cannot support dynamic IDs, so also set nodynamicid.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Configuration
Set no_dynamic_id to prevent use of dynamic USB device IDs.
xusbatm no_dynamic_id = set
Event History
Frequently Asked Questions
Which systems are most relevant to triage?
Systems running the listed Ubuntu kernel packages are relevant if they use the xusbatm USB driver. The faulty behavior is specifically associated with dynamic USB IDs.
What configuration limits are indicated by the fix?
The resolved code sets no_dynamic_id because xusbatm cannot support dynamic IDs. This prevents the driver from accepting dynamic IDs, avoiding the broken pointer arithmetic path.
Are fixed Ubuntu package versions provided?
No fixed package versions are included in the available data. Check Ubuntu security updates for the relevant kernel package and compare against the update information for this CVE.