Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-74675

vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b84fd400f80adf4d1c88fbce50ae1cf2f8119e65affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 38400673c9bfb39cfc87539e1a072087e98f4e4faffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cab5a342f0589334046741006d8a280514f94235affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 38a0aa593ebc275aea6f79534d07f44e43768ce6affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3f6b1d3fcfc26dc3fc85262f753439df93b055b4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b664592e9ba8c47c9e23408db7ba52eb9f946c8aaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cc4a1a2ce0c58eafd477effb055863935260ddc1affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e25d47a526939ad44b75f778b8a7500562b84fc1affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.152 to ≤ 6.6.*unaffected
  • 6.12.104 to ≤ 6.12.*unaffected
  • 6.18.45 to ≤ 6.18.*unaffected
  • 7.1.9 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References