In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated… (CVE-2026-98755)

The Linux kernel contained a vulnerability (CVE-2026-98755) in the tty vcc subsystem where the stack-allocated struct vio_vcc pkt was partially initialized. The tag.stype_env field was left uninitialized prior to being transmitted using ldc_write(), potentially exposing kernel stack memory contents to the LDC peer. The flaw was addressed by ensuring the control packet is zero-initialized before use, preventing unintended data leakage.

This vulnerability could allow an attacker with access to the LDC peer interface to receive uninitialized kernel stack data, potentially exposing sensitive information from kernel memory. There is no indication of code execution or privilege escalation directly from this issue. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to zero-initialize the control packet in the vcc_send_ctl() function, eliminating the uninitialized memory leak. Users should apply the official kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.