VulnerabilityPublished 18 Oct 2026Updated 21 Oct 2026

CVE-2026-98751: Linux kernel · tty: abort break signalling on hangup

Source GCVE Database

Authoritative record:CVE-2026-98751

Not known to be exploited · fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 13:47 UTC

Severity

Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6, 845a2737e0f5ffe5ca8d38de556012b0c9472cdd, 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-cg92-2wfv-ppg3

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6	Fixed in c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 845a2737e0f5ffe5ca8d38de556012b0c9472cdd	Fixed in 845a2737e0f5ffe5ca8d38de556012b0c9472cdd
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35	Fixed in 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 6c9c9367351a461d62e5c0a39bffdcfbb40f068b	Fixed in 6c9c9367351a461d62e5c0a39bffdcfbb40f068b
LinuxLinux	Affected ≥ f34d7a5b7010b82fe97da95496b9971435530062, < 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783	Fixed in 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783
LinuxLinux	Affected =2.6.26	Fixed in–

AI-suggested

A fix has been implemented in the Linux kernel to address this race condition. Kernel maintainers and users should apply the official kernel updates that include this resolution. Drivers should ensure they handle the race condition properly by aborting TCSBRK and TCSBRKP ioctls and disabling break state on shutdown as recommended.

Description

A race condition vulnerability in the Linux kernel's tty subsystem involving break signalling on hangup has been resolved. The issue arises when break ioctls race with hangup events, potentially causing calls into tty drivers for devices that are no longer present or powered down. Proper driver handling of this race is required, and the TCSBRK and TCSBRKP ioctls should be aborted to prevent callbacks after user-controlled timeouts or device reopenings. Drivers are advised to disable break state on shutdown to avoid race conditions during hangup.

References

Community reviews

Loading reviews…