Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98755

tty: vcc: zero-initialize control packet in vcc_send_ctl()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated struct vio_vcc pkt was partially initialized, leaving the tag.stype_env field uninitialized before being sent via ldc_write(), potentially leaking kernel stack data to the LDC peer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 9e2eedb3611c1a3a377105cb26af52731e826fa5affected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 360111628a968ebc8e6da400b28f23ae317d4e04affected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 639178bc8e77aad307a9ee5e62471c5dcc8dda67affected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebedaffected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 6f1a08ef02825b440126c406ea63ef6128888e15affected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 4335278d0e75395cbfaf71c84b521df56d69e936affected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 399aa38af1d78001612e3130b2056ea392a355caaffected
  • 8868e44a56160328cd4003d95f4083f64b136e33 to < 1f71f565e3585da1098ff19ca3c24687dab59185affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 5.10.273 to ≤ 5.10.*unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References