CVE-2026-98751
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-10-18 16:17:28.880000
Last modified
2026-10-30 13:21:23.950000
View original CVE JSON
{
"id": "CVE-2026-98751",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-10-18T16:17:28.880",
"lastModified": "2026-10-30T13:21:23.950",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: abort break signalling on hangup\n\nThe break ioctls can race with hangup and end up calling into a tty\ndriver for a device that is already gone or powered down.\n\nDrivers must handle this race, but TCSBRK and TCSBRKP should still be\naborted to avoid calling back into the driver after a user-controlled\ntimeout (possibly even after the tty has been reopened).\n\nNote that drivers should disable any break state on shutdown so just\nreturn on hangup (calling break_ctl() again is racy and will most likely\nfail for drivers handling the race)."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/tty/tty_io.c",
"include/linux/tty.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "70fa2bec352d9f949b882af3c380b916e4a29a43",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "8224d25534580d07925607bbd617daf9c8de26c3",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "8a0f0f9ef41cb80de4d5da4ae146df3075463f6b",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "6c9c9367351a461d62e5c0a39bffdcfbb40f068b",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "3bc82999fb85cecc7eb6ec1755ee7d698aa1e783",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "94af6cd832e9b4ce39a8fb59144a8f09ab56fd35",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6",
"versionType": "git",
"status": "affected"
},
{
"version": "f34d7a5b7010b82fe97da95496b9971435530062",
"lessThan": "845a2737e0f5ffe5ca8d38de556012b0c9472cdd",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/tty/tty_io.c",
"include/linux/tty.h"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "2.6.26",
"status": "affected"
},
{
"version": "0",
"lessThan": "2.6.26",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.273",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.224",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.191",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.160",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.113",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.56",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.10",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6c9c9367351a461d62e5c0a39bffdcfbb40f068b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/70fa2bec352d9f949b882af3c380b916e4a29a43",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8224d25534580d07925607bbd617daf9c8de26c3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8a0f0f9ef41cb80de4d5da4ae146df3075463f6b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}