CVE-2026-98754

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98754
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98754.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98754
Downstream
Related
Published
2026-10-18T15:47:40Z
Modified
2026-11-04T14:27:17Z
Summary
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

vcc_cleanup() sets port->tty to NULL without holding port->lock, racing with vcc_event() LDC callbacks that read port->tty under port->lock and then use tty->port. This can cause a use-after-free when the callback dereferences tty->port after cleanup has already destroyed and freed it.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98754.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb
Fixed
b0ad9d025c3229a628a82fbaa7578891075a950d
Fixed
b193617080b7036d143674089bcfb7d2ba3db588
Fixed
afcbb821c571f39b273127a7c7d26cb2cef27d2f
Fixed
57753441ef84bee3bf0e9ee1e3778d119c44aa32
Fixed
88f6ecb058801e9ce7b9aabc966530118d7cd53c
Fixed
821050631750e982007c0856c119346edba51cae
Fixed
1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4
Fixed
03b49c991abb8d021ca6fe51cd173447236b0552

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98754.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.14.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98754.json"