GHSA-CG92-2WFV-PPG3
Vulnerability from github – Published: 2026-10-18 18:32 – Updated: 2026-10-30 15:33In the Linux kernel, the following vulnerability has been resolved:
tty: abort break signalling on hangup
The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down.
Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened).
Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
{
"affected": [],
"aliases": [
"CVE-2026-98751"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-18T16:17:28Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: abort break signalling on hangup\n\nThe break ioctls can race with hangup and end up calling into a tty\ndriver for a device that is already gone or powered down.\n\nDrivers must handle this race, but TCSBRK and TCSBRKP should still be\naborted to avoid calling back into the driver after a user-controlled\ntimeout (possibly even after the tty has been reopened).\n\nNote that drivers should disable any break state on shutdown so just\nreturn on hangup (calling break_ctl() again is racy and will most likely\nfail for drivers handling the race).",
"id": "GHSA-cg92-2wfv-ppg3",
"modified": "2026-10-30T15:33:58Z",
"published": "2026-10-18T18:32:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98751"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6c9c9367351a461d62e5c0a39bffdcfbb40f068b"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/70fa2bec352d9f949b882af3c380b916e4a29a43"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/8224d25534580d07925607bbd617daf9c8de26c3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/8a0f0f9ef41cb80de4d5da4ae146df3075463f6b"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.