CVE-2026-98771

A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated USB (Universal Serial Bus) device can provide a truncated response, allowing an unprivileged local user to read stale kernel heap memory through exposed system status files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.