Menu

Star on GitHub · 3.5k

CVE-2026-97479

In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning…

Published Sep 24, 2026EPSS 0.17%

Overview

CVE-2026-97479 is a known-severity vulnerability. It was published on September 24, 2026.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

driver core: Avoid warning when removing a device while its supplier is unbinding

During driver removal, the following warning can appear:

WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 __device_links_no_driver+0xcc/0xfc

...

Call trace:

__device_links_no_driver+0xcc/0xfc (P)

device_links_driver_cleanup+0xa8/0xf0

device_release_driver_internal+0x208/0x23c

device_links_unbind_consumers+0xe0/0x108

device_release_driver_internal+0xec/0x23c

device_links_unbind_consumers+0xe0/0x108

device_release_driver_internal+0xec/0x23c

device_links_unbind_consumers+0xe0/0x108

device_release_driver_internal+0xec/0x23c

driver_detach+0xa0/0x12c

bus_remove_driver+0x6c/0xbc

driver_unregister+0x30/0x60

pci_unregister_driver+0x20/0x9c

lan966x_pci_driver_exit+0x18/0xa90 [lan966x_pci]

This warning is triggered when a consumer is removed because the links

statu

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently asked questions

What is CVE-2026-97479?

CVE-2026-97479 is a known-severity vulnerability. It was published on September 24, 2026.

How severe is CVE-2026-97479?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-97479?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-97479?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-97479 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

CyberStrike v2 is here — more intelligence, greater reach