Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98754

tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:47 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before b0ad9d025c3229a628a82fbaa7578891075a950d git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before b193617080b7036d143674089bcfb7d2ba3db588 git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before afcbb821c571f39b273127a7c7d26cb2cef27d2f git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before 57753441ef84bee3bf0e9ee1e3778d119c44aa32 git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before 88f6ecb058801e9ce7b9aabc966530118d7cd53c git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before 821050631750e982007c0856c119346edba51cae git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before 1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4 git
  • affected 8f03f948ba356b7cb254b45a4e78b5b3d86fd3bb to before 03b49c991abb8d021ca6fe51cd173447236b0552 git
Other versions: unaffected
Linux Linux
  • affected 4.14
  • unaffected before 4.14 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.113 to 6.12.*, inclusive semver
  • unaffected 6.18.56 to 6.18.*, inclusive semver
  • unaffected 7.2.10 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98754
CNA
Linux
Tags
Published
18 Oct 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.