Strix
73K

CVE-2026-98751

UnknownEPSS 0.17%

Last modified

CVE-2026-98751 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f34d7a5b7010b82fe97da95496b9971435530062, < 70fa2bec352d9f949b882af3c380b916e4a29a43; >= f34d7a5b7010b82fe97da95496b9971435530062, < 8224d25534580d07925607bbd617daf9c8de26c3; >= f34d7a5b7010b82fe97da95496b9971435530062, < 8a0f0f9ef41cb80de4d5da4ae146df3075463f6b; >= f34d7a5b7010b82fe97da95496b9971435530062, < 6c9c9367351a461d62e5c0a39bffdcfbb40f068b; >= f34d7a5b7010b82fe97da95496b9971435530062, < 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783; >= f34d7a5b7010b82fe97da95496b9971435530062, < 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35; >= f34d7a5b7010b82fe97da95496b9971435530062, < c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6; >= f34d7a5b7010b82fe97da95496b9971435530062, < 845a2737e0f5ffe5ca8d38de556012b0c9472cdd
LinuxLinux2.6.26

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98751?
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
How severe is CVE-2026-98751?
Severity scoring for CVE-2026-98751 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98751?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98751?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST