CVE-2026-97977: Software Security Vulnerability Vulnerability

UNKNOWN
Advisory Identifier: GHSA-mvpx-42x3-8643
Share
Published
Advisory Summary

CVE-2026-97977 is a security vulnerability vulnerability (General Security Weakness) affecting Software libraries in the Maven ecosystem. Remediation is available in the latest vendor maintenance releases.

CVE-2026-97977 at a Glance

CVE Identifier CVE-2026-97977
GHSA Identifier GHSA-mvpx-42x3-8643
Severity N/A
CVSS v3.1 Base Score N/A
CWE Classification General Security Weakness
Affected Product Software
Package Ecosystem Maven
Published Date
Last Updated

How to Fix CVE-2026-97977

To remediate this vulnerability, upgrade all affected Software dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

mvn dependency:tree

How to Check if You Are Affected

To determine whether your Java application is affected by CVE-2026-97977, inspect your build dependencies using the Maven Dependency Plugin:

mvn dependency:tree

Analyze the terminal output to locate any version of Software in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The mvn dependency:tree command inspects the resolved dependency graph declared in your project's POM files; it does not perform automated security scanning or inspect runtime dynamic classpaths. Always verify runtime container classpaths and shaded JARs.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under General Security Weakness. In Software, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusb_data by rx_work btusb_close() and btusb_flush() cancel data->rx_work with the asynchronous cancel_delayed_work(), so if btusb_rx_work() is already running on another CPU it keeps running after the cancel returns. btusb_disconnect() calls hci_unregister_dev(), which invokes btusb_close(), and then frees the btusb_data. A still running btusb_rx_work() then dereferences the freed data: while ((skb = skb_dequeue(&data->acl_q))) data->recv_acl(data->hdev, skb); Use cancel_delayed_work_sync() instead. In btusb_close() the cancel also has to happen after btusb_stop_traffic(), otherwise an URB completion racing with the cancel can requeue the work right after it has been waited for.

References

NVD — CVE-2026-97977 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-97977
git.kernel.org/stable/c/1c12c31176... WEB
https://git.kernel.org/stable/c/1c12c3117639e78940959d956519c758c57d0849
git.kernel.org/stable/c/472d005622... WEB
https://git.kernel.org/stable/c/472d005622525b7be155cac99dde2252b0163bd1
git.kernel.org/stable/c/5242050195... WEB
https://git.kernel.org/stable/c/5242050195a711e9cd6a9935f689ab6656b94a91
git.kernel.org/stable/c/93b59937bd... WEB
https://git.kernel.org/stable/c/93b59937bda3fffc6386c79f5544a39bc680c8e8
git.kernel.org/stable/c/fa391adb9c... WEB
https://git.kernel.org/stable/c/fa391adb9c755515a89993634745e9079e5ef37c
git.kernel.org/stable/c/fc654a72a8... WEB
https://git.kernel.org/stable/c/fc654a72a8d979db15e2773a481e931abaf5a9e8

Frequently Asked Questions

What is CVE-2026-97977?
CVE-2026-97977 is a security vulnerability in Software classified as a security vulnerability vulnerability under General Security Weakness.
Which Software versions are affected?
Affected versions include releases prior to current release patches.
What version fixes CVE-2026-97977?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
What CWE is associated with CVE-2026-97977?
CVE-2026-97977 is classified under General Security Weakness.
How can I check Maven dependencies for CVE-2026-97977?
Run the dependency tree command: 'mvn dependency:tree'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-mvpx-42x3-8643",
  "modified" : "2026-10-03T12:31:22Z",
  "published" : "2026-09-25T12:31:31Z",
  "aliases" : [ "CVE-2026-97977" ],
  "details" : "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: Fix UAF of btusb_data by rx_work\n\nbtusb_close() and btusb_flush() cancel data->rx_work with the\nasynchronous cancel_delayed_work(), so if btusb_rx_work() is already\nrunning on another CPU it keeps running after the cancel returns.\n\nbtusb_disconnect() calls hci_unregister_dev(), which invokes\nbtusb_close(), and then frees the btusb_data. A still running\nbtusb_rx_work() then dereferences the freed data:\n\n\twhile ((skb = skb_dequeue(&data->acl_q)))\n\t\tdata->recv_acl(data->hdev, skb);\n\nUse cancel_delayed_work_sync() instead. In btusb_close() the cancel also\nhas to happen after btusb_stop_traffic(), otherwise an URB completion\nracing with the cancel can requeue the work right after it has been\nwaited for.",
  "severity" : [ ],
  "affected" : [ ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-97977"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/1c12c3117639e78940959d956519c758c57d0849"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/472d005622525b7be155cac99dde2252b0163bd1"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/5242050195a711e9cd6a9935f689ab6656b94a91"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/93b59937bda3fffc6386c79f5544a39bc680c8e8"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/fa391adb9c755515a89993634745e9079e5ef37c"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/fc654a72a8d979db15e2773a481e931abaf5a9e8"
  } ],
  "database_specific" : {
    "cwe_ids" : [ ],
    "severity" : null,
    "github_reviewed" : false,
    "github_reviewed_at" : null,
    "nvd_published_at" : "2026-09-25T11:17:25Z"
  }
}