SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74675

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of tty references in the kbd_keycode() function, where it reads the tty pointer without proper reference management, potentially leading to race conditions during shutdown. This could result in system instability or crashes when the tty is accessed concurrently. Linux kernel maintainers and system administrators should prioritize this issue to ensure the stability and reliability of their systems.

CVE
CVE-2026-74675
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed.