CVE-2026-97540

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net usb pegasus component where the code relies on pointer arithmetic for the ID table. When dynamic IDs are involved, the usb device id parameter of the probe function is located on the heap, causing the pointer arithmetic to produce an index that is significantly out of bounds. This occurs because the system attempts to use a side table for additional information instead of utilizing the driver info field of the usb device id.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.