CVE-2026-98750
Received Received - Intake

Race Condition in Linux Kernel TTY Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being opened (e.g. when CLOCAL is not set). Not all TTY drivers guarantee that the minor number is no longer in use when registering devices however, something which can lead to a use-after-free when closing a TTY (and saving its termios) races with re-registration. Add a new TTY_DRIVER_RESET_SAVED_TERMIOS flag to request that any saved termios state is reset on registration and only set it for drivers that make sure that the minor number is no longer in use.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98750
EUVD
EUVD-2026-103835

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 93857edd9829e144acb6c7e72d593f6e01aead66
Linux Linux 93857edd9829e144acb6c7e72d593f6e01aead66
Linux Linux 93857edd9829e144acb6c7e72d593f6e01aead66
Linux Linux 93857edd9829e144acb6c7e72d593f6e01aead66
Linux Linux 4.12

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the TTY subsystem where resetting saved terminal settings during device registration can lead to a use-after-free issue. When a minor number is reused for a different device, old terminal settings may prevent the port from opening. The fix introduces a new flag to reset saved termios state only for drivers that ensure minor number safety.

Detection Guidance

This vulnerability is specific to the Linux kernel's TTY subsystem and requires kernel-level inspection. Detection involves checking for affected kernel versions and TTY driver configurations. Use commands like 'uname -a' to check kernel version and inspect '/proc/tty/drivers' for drivers without the TTY_DRIVER_RESET_SAVED_TERMIOS flag. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could cause system instability or crashes when closing a TTY device if the race condition is triggered. It may lead to memory corruption or unexpected behavior in terminal operations, potentially affecting applications relying on TTY functionality.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for this TTY termios race condition. Update all affected TTY drivers to set the TTY_DRIVER_RESET_SAVED_TERMIOS flag during registration. Monitor system logs for TTY-related errors post-update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98750. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart