VulnerabilityPublished 18 Oct 2026Updated 21 Oct 2026

CVE-2026-98751: Linux kernel · tty: abort break signalling on hangup

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6, 845a2737e0f5ffe5ca8d38de556012b0c9472cdd, 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6	Fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 845a2737e0f5ffe5ca8d38de556012b0c9472cdd	Fixed in 845a2737e0f5ffe5ca8d38de556012b0c9472cdd
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35	Fixed in 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 6c9c9367351a461d62e5c0a39bffdcfbb40f068b	Fixed in 6c9c9367351a461d62e5c0a39bffdcfbb40f068b
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783	Fixed in 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783
LinuxLinux	Affected =2.6.26	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).

References

Community reviews

Loading reviews…