Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-98754 Details

Description

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup vcc_cleanup() sets port->tty to NULL without holding port->lock, racing with vcc_event() LDC callbacks that read port->tty under port->lock and then use tty->port. This can cause a use-after-free when the callback dereferences tty->port after cleanup has already destroyed and freed it.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/03b49c991abb8d021ca6fe51cd173447236b0552 kernel.org
https://git.kernel.org/stable/c/1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4 kernel.org
https://git.kernel.org/stable/c/57753441ef84bee3bf0e9ee1e3778d119c44aa32 kernel.org
https://git.kernel.org/stable/c/821050631750e982007c0856c119346edba51cae kernel.org
https://git.kernel.org/stable/c/88f6ecb058801e9ce7b9aabc966530118d7cd53c kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-98754
NVD Published Date:
Oct 18, 2026
NVD Last Modified:
Oct 30, 2026
Source:
kernel.org
CVE-2026-98754 Details - Not Deferred