tty: abort break signalling on hangup (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.18 % · centile 7 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driver for a device that is already gone or powered down. Drivers must handle this race, but TCSBRK and TCSBRKP should still be aborted to avoid calling back into the driver after a user-controlled timeout (possibly even after the tty has been reopened). Note that drivers should disable any break state on shutdown so just return on hangup (calling break_ctl() again is racy and will most likely fail for drivers handling the race).
Références
- https://git.kernel.org/stable/c/70fa2bec352d9f949b882af3c380b916e4a29a43
- https://git.kernel.org/stable/c/8224d25534580d07925607bbd617daf9c8de26c3
- https://git.kernel.org/stable/c/8a0f0f9ef41cb80de4d5da4ae146df3075463f6b
- https://git.kernel.org/stable/c/6c9c9367351a461d62e5c0a39bffdcfbb40f068b
- https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783
- https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35
- https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6
- https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd
Références européennes
- ENISA EUVD · EUVD-2026-103836
- GCVE · GCVE-0-2026-98751
Avis du CERT-FR
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected f34d7a5b7010b82fe97da95496b9971435530062 < 70fa2bec352d9f949b882af3c380b916e4a29a43 ; affected f34d7a5b7010b82fe97da95496b9971435530062 < 8224d25534580d07925607bbd617daf9c8de26c3 ; affected f34d7a5b7010b82fe97da95496b9971435530062 < 8a0f0f9ef41cb80de4d5da4ae146df3075463f6b ; affected f34d7a5b7010b82fe97da95496b9971435530062 < 6c9c9367351a461d62e5c0a39bffdcfbb40f068b ; affected f34d7a5b7010b82fe97da95496b9971435530062 < 3bc82999fb85cecc7eb6ec1755ee7d698aa1e783 ; affected f34d7a5b7010b82fe97da95496b9971435530062 < 94af6cd832e9b4ce39a8fb59144a8f09ab56fd35 |
| Linux · Linux | affected 2.6.26 ; unaffected 0 < 2.6.26 ; unaffected 5.10.273 ≤ 5.10.* ; unaffected 5.15.224 ≤ 5.15.* ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |