In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device… (CVE-2026-98750)

The vulnerability in the Linux kernel involves a race condition in the TTY subsystem where resetting the saved termios state on device registration is necessary because minor device numbers can be reused for different devices. Without resetting, old termios settings may prevent the port from opening, especially when CLOCAL is not set. Some TTY drivers do not guarantee that the minor number is free upon device registration, which can lead to a use-after-free race condition when closing a TTY and saving its termios state races with device re-registration. The fix adds a TTY_DRIVER_RESET_SAVED_TERMIOS flag to request resetting saved termios state on registration, applied only to drivers that ensure the minor number is no longer in use.

This vulnerability can cause a use-after-free condition in the Linux kernel's TTY subsystem, potentially leading to system instability or denial of service by preventing ports from opening correctly. There is no indication of remote code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel by adding the TTY_DRIVER_RESET_SAVED_TERMIOS flag to reset saved termios state on device registration for affected drivers. Users should update to the fixed Linux kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.