Strix
73K

CVE-2026-98753

UnknownEPSS 0.17%

Last modified

CVE-2026-98753 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ERROR on activation failure Make sure to restore the TTY_IO_ERROR flag if activation fails to prevent I/O attempts on a port that is gone or powered down. This specifically avoids issues like kernel panic due to unclocked accesses or NULL-pointer dereferences when accessing powered down or deregistered ports when a TTY ioctl races with hangup and open. Note that the flag is set again in tty_port_close() but not restoring it on activation failure leaves a window where drivers fail to handle the ioctl-hangup race.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ERROR on activation failure Make sure to restore the TTY_IO_ERROR flag if activation fails to prevent I/O attempts on a port that is gone or powered down. This specifically avoids issues like kernel panic due to unclocked accesses or NULL-pointer dereferences when accessing powered down or deregistered ports when a TTY ioctl races with hangup and open. Note that the flag is set again in tty_port_close() but not restoring it on activation failure leaves a window where drivers fail to handle the ioctl-hangup race.

Metrics

EPSS Probability
0.17%

6.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 761e8c5eb13d1b5e196b0b39bdfed6fc67af9dd2; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 5469dc4153a60289c5bae00215947c6ce09fcc0e; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < e24625bff786fa3f22cc38b5038362b910621e83; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 16032c980d8f71642fcdc99309c571df3fcf3328; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 34d4f67472ef7a744970b772a8565ddc727788e2; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 7021acc84c2e0add77a1a33152e3a1e428fdbfdb; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 6388409b711eb91b14fa075a4d861ccc4df1cfe7; >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4, < 56964f6a31238fb41d5830bb42520c5b10ff7d8f
LinuxLinux2.6.33

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98753?
In the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ERROR on activation failure Make sure to restore the TTY_IO_ERROR flag if activation fails to prevent I/O attempts on a port that is gone or powered down. This specifically avoids issues like kernel panic due to unclocked accesses or NULL-pointer dereferences when accessing powered down or deregistered ports when a TTY ioctl races with hangup and open. Note that the flag is set again in tty_port_close() but not restoring it on activation failure leaves a window where drivers fail to handle the ioctl-hangup race.
How severe is CVE-2026-98753?
Severity scoring for CVE-2026-98753 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98753?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98753?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST