All vulnerabilities
CVE-2026-98755

Linux: tty: vcc: zero-initialize control packet in vcc_send_ctl()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebedAlso 6f1a08ef02825b440126c406ea63ef6128888e15, 4335278d0e75395cbfaf71c84b521df56d69e936 and 6 moreCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebedLinuxCVE List
  • 6f1a08ef02825b440126c406ea63ef6128888e15LinuxCVE List
  • 4335278d0e75395cbfaf71c84b521df56d69e936LinuxCVE List
  • 399aa38af1d78001612e3130b2056ea392a355caLinuxCVE List
  • 1f71f565e3585da1098ff19ca3c24687dab59185LinuxCVE List
  • 6.6.160LinuxCVE List
Show all 9 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: vcc: zero-initialize control packet in vcc_send_ctl()

The stack-allocated struct vio_vcc pkt was partially initialized, leaving the tag.stype_env field uninitialized before being sent via ldc_write(), potentially leaking kernel stack data to the LDC peer.

Text from CVE List

Affected versions 14

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebedCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6f1a08ef02825b440126c406ea63ef6128888e15CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4335278d0e75395cbfaf71c84b521df56d69e936CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 399aa38af1d78001612e3130b2056ea392a355caCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1f71f565e3585da1098ff19ca3c24687dab59185CVE List
  • Linuxaffected: all versions before 6.6.160CVE List
  • Linuxaffected: all versions before 6.12.113CVE List
  • Linuxaffected: all versions before 6.18.56CVE List
  • Linuxaffected: all versions before 7.2.10CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5