CVE-2026-98696

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix driver deregistration order USB serial driver modules register one driver for the USB bus and one or more drivers for the ports on the USB serial bus. When unloading a driver module, the USB driver must be deregistered before the USB serial bus drivers so that I/O is stopped before unbinding the ports to avoid use-after-free in completion handlers accessing port data. Note that the "new_id" attributes must first be removed to prevent new ids from being added and triggering a probe of the USB driver after it has been deregistered.

Is your site exposed to CVE-2026-98696?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/428d479a0d31460fbf5969ab262ccd673f1fac01 https://git.kernel.org/stable/c/646e5b28b4fdbc1b828a2398d6ced2c1dd308a46 https://git.kernel.org/stable/c/9b085a06a0a411b0bcdf18b61c3ebf1be1c72ffe https://git.kernel.org/stable/c/a1aa474768f69ea3a70da523f00f74c264cfa10e https://git.kernel.org/stable/c/e7ad832b1144df19cbbaaa655625c6f984e85b9f

Frequently Asked Questions

What is CVE-2026-98696? +

In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix driver deregistration order USB serial driver modules register one driver for the USB bus and one or more drivers for the ports on the USB serial bus. When unloading a driver module, the USB driver must be deregistered before the USB serial bus drivers so that I/O is stopped before unbinding the ports to avoid use-after-free in completion handlers accessing port data. Note that the "new_id" attributes must first be removed to prevent new ids from being added and triggering a probe of the USB driver after it has been deregistered.

How do I check if I'm vulnerable to CVE-2026-98696? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.