Dashboard / CVE-2026-98754

CVE-2026-98754

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-18 Modified: 2026-10-30 First seen: 2026-10-29 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup vcc_cleanup() sets port->tty to NULL without holding port->lock, racing with vcc_event() LDC callbacks that read port->tty under port->lock and then use tty->port. This can cause a use-after-free when the callback dereferences tty->port after cleanup has already destroyed and freed it.

Affected Software (9)

VendorProductVersion
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < b0ad9d025c3229a628a82fbaa7578891075a950d
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < b193617080b7036d143674089bcfb7d2ba3db588
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < afcbb821c571f39b273127a7c7d26cb2cef27d2f
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < 57753441ef84bee3bf0e9ee1e3778d119c44aa32
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < 88f6ecb058801e9ce7b9aabc966530118d7cd53c
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < 821050631750e982007c0856c119346edba51cae
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < 1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4
Linux Linux 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb < 03b49c991abb8d021ca6fe51cd173447236b0552
Linux Linux 4.14

References & Advisories (8)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001760
Percentile 7.2%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00176
2026-11-05
0.00176
2026-11-04
0.00176
2026-11-03
0.00176
2026-11-02
0.00176
2026-11-01
0.00176
2026-10-31
0.00176
2026-10-30
0.00168
2026-10-29
0.00168
2026-10-28
0.00168

Intelligence Sources

mitre ref →
nvd ref →

External Links