Riskcovery

CVE-2026-98751

tty: abort break signalling on hangup

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: abort break signalling on hangup

The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down.

Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened).

Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 70fa2bec352d9f949b882af3c380b916e4a29a43Affected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 8224d25534580d07925607bbd617daf9c8de26c3Affected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 8a0f0f9ef41cb80de4d5da4ae146df3075463f6bAffected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 6c9c9367351a461d62e5c0a39bffdcfbb40f068bAffected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783Affected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35Affected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6Affected
  • f34d7a5b7010b82fe97da95496b9971435530062 to before 845a2737e0f5ffe5ca8d38de556012b0c9472cddAffected
LinuxLinux
  • 2.6.26Affected
  • before 2.6.26Not affected
  • 5.10.273 through 5.10.*Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.