CVE-2026-98755

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98755
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98755.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98755
Downstream
Related
Published
2026-10-18T15:47:41Z
Modified
2026-11-04T14:27:18Z
Summary
tty: vcc: zero-initialize control packet in vcc_send_ctl()
Details

In the Linux kernel, the following vulnerability has been resolved:

tty: vcc: zero-initialize control packet in vcc_send_ctl()

The stack-allocated struct vio_vcc pkt was partially initialized, leaving the tag.stype_env field uninitialized before being sent via ldc_write(), potentially leaking kernel stack data to the LDC peer.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98755.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8868e44a56160328cd4003d95f4083f64b136e33
Fixed
9e2eedb3611c1a3a377105cb26af52731e826fa5
Fixed
360111628a968ebc8e6da400b28f23ae317d4e04
Fixed
639178bc8e77aad307a9ee5e62471c5dcc8dda67
Fixed
4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebed
Fixed
6f1a08ef02825b440126c406ea63ef6128888e15
Fixed
4335278d0e75395cbfaf71c84b521df56d69e936
Fixed
399aa38af1d78001612e3130b2056ea392a355ca
Fixed
1f71f565e3585da1098ff19ca3c24687dab59185

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98755.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.14.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98755.json"