Strix
73.3K

CVE-2026-98750

UnknownEPSS 0.17%

Last modified

CVE-2026-98750 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being opened (e.g. when CLOCAL is not set). Not all TTY drivers guarantee that the minor number is no longer in use when registering devices however, something which can lead to a use-after-free when closing a TTY (and saving its termios) races with re-registration. Add a new TTY_DRIVER_RESET_SAVED_TERMIOS flag to request that any saved termios state is reset on registration and only set it for drivers that make sure that the minor number is no longer in use.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being opened (e.g. when CLOCAL is not set). Not all TTY drivers guarantee that the minor number is no longer in use when registering devices however, something which can lead to a use-after-free when closing a TTY (and saving its termios) races with re-registration. Add a new TTY_DRIVER_RESET_SAVED_TERMIOS flag to request that any saved termios state is reset on registration and only set it for drivers that make sure that the minor number is no longer in use.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 93857edd9829e144acb6c7e72d593f6e01aead66, < 15ddaf908a8eee14e1872ff9c4cdb73562634e7e; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < bcb9b5df70d439f3c9d5a2d7f359dd7ab117bee0; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < 33048616c4e22930e8769b8d14ee8a0dc5a80ceb; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < 6b4e15cccfbe03b7c6ae60ff570c401bfb1e51d6; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < 1572d86bcf0bcb848d20fc5e5de7ed6963034c2b; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < 08bf919f041af9de372428bb0c938157ea144164; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < dcaf0251f847a45861e94c6617024a9455687d2f; >= 93857edd9829e144acb6c7e72d593f6e01aead66, < 8df07fe93573e9e548d6645273e9bcb6eb74059e
LinuxLinux4.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98750?
In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor number can be reused for an entirely different device and where the old settings may prevent the port from even being opened (e.g. when CLOCAL is not set). Not all TTY drivers guarantee that the minor number is no longer in use when registering devices however, something which can lead to a use-after-free when closing a TTY (and saving its termios) races with re-registration. Add a new TTY_DRIVER_RESET_SAVED_TERMIOS flag to request that any saved termios state is reset on registration and only set it for drivers that make sure that the minor number is no longer in use.
How severe is CVE-2026-98750?
Severity scoring for CVE-2026-98750 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98750?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98750?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST