In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and… (CVE-2026-98751)

This vulnerability in the Linux kernel's tty subsystem involves a race condition where break signalling ioctls (TCSBRK and TCSBRKP) can race with device hangup events. This race can lead to the kernel calling into a tty driver for a device that has already been removed or powered down, potentially causing undefined behavior or crashes. The fix involves aborting these break ioctls to prevent callbacks after timeouts or device reopenings and ensuring drivers disable break state on shutdown to avoid further race conditions.

If unmitigated, this race condition could cause the kernel to interact with tty drivers for devices that are no longer available, potentially leading to system instability or crashes. However, there is no indication of active exploitation or broader security impact such as privilege escalation or data exposure.

A fix has been implemented in the Linux kernel to address this race condition. Kernel maintainers and users should apply the official kernel updates that include this resolution. Drivers should ensure they handle the race condition properly by aborting TCSBRK and TCSBRKP ioctls and disabling break state on shutdown as recommended.