{"id":"CVE-2026-98754","published":"2026-10-18T16:17:29.203","lastModified":"2026-10-19T10:19:39.547","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: hold port lock when clearing tty pointer in vcc_cleanup\n\nvcc_cleanup() sets port->tty to NULL without holding port->lock, racing\nwith vcc_event() LDC callbacks that read port->tty under port->lock and\nthen use tty->port. This can cause a use-after-free when the callback\ndereferences tty->port after cleanup has already destroyed and freed it.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/03b49c991abb8d021ca6fe51cd173447236b0552","tags":[]},{"url":"https://git.kernel.org/stable/c/1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4","tags":[]},{"url":"https://git.kernel.org/stable/c/821050631750e982007c0856c119346edba51cae","tags":[]},{"url":"https://git.kernel.org/stable/c/88f6ecb058801e9ce7b9aabc966530118d7cd53c","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}