CVE-2026-98751tty: abort break signalling on hangup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from f34d7a5b7010b82fe97da95496b9971435530062 before 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783; from f34d7a5b7010b82fe97da95496b9971435530062 before 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35; from f34d7a5b7010b82fe97da95496b9971435530062 before c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6; from f34d7a5b7010b82fe97da95496b9971435530062 before 845a2737e0f5ffe5ca8d38de556012b0c9472cdd | CNA record |
References
- https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783
- https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35
- https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6
- https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.