{"id":"CVE-2026-98695","aliases":[],"cve":{"records":[{"id":"CVE-2026-98695","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-25T10:25:14.364Z","published":"2026-10-18T15:46:19.498Z","modified":"2026-10-30T12:38:47.405Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:38:47.405Z"}],"references":[{"url":"https://git.kernel.org/stable/c/c7ef25e96dc3f808eb891bbbd43b6a682846eb0c","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/98f0a25134bfce44ebd1db0341fa0e8603ff276d","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/3a728adbed9fd822f99a9d9c5ebad5c3b565ba4a","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/24d6edb6bd7f7a9e6cee2f8fe435781daab8aa0f","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/ae0da9a5c1ca95c20cc5feffd511ce6eae75924e","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/4597ddd6168ae2a4123404e5f0871f1070dc7773","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/7912a95d1345c77d8d63b530b00c118700b78abd","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/ae0e61d95677efa778379853e495d748e6efbf95","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"5.10.273"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"5.15.224"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"6.6.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"6.12.113"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"6.18.56"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"7.2.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.26","versionEndExcluding":"7.3"}]}]}]}],"prioritization":[]},"title":"USB: serial: fix ioctl hangup race","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix ioctl hangup race\n\nThe tty ioctls can race with hangup and end up calling into a tty driver\nfor a device that is already gone or powered down.\n\nSerialise the callbacks using the tty port mutex and add the missing\nchecks to make sure the port has not been hung up before accessing port\ndriver data or hardware.\n\nThis specifically avoids dereferencing a NULL-pointer if a device is\ndisconnected during lengthy break signalling.\n\nNote that TIOCGICOUNT and TIOCMIWAIT do not access port driver data or\nhardware and are therefore not affected by the race.","score":null,"severity":"unknown","published":"2026-10-18T15:46:19.498Z","modified":"2026-10-30T12:38:47.405Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"c7ef25e96dc3f808eb891bbbd43b6a682846eb0c","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"98f0a25134bfce44ebd1db0341fa0e8603ff276d","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"3a728adbed9fd822f99a9d9c5ebad5c3b565ba4a","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"24d6edb6bd7f7a9e6cee2f8fe435781daab8aa0f","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"ae0da9a5c1ca95c20cc5feffd511ce6eae75924e","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"4597ddd6168ae2a4123404e5f0871f1070dc7773","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"7912a95d1345c77d8d63b530b00c118700b78abd","versionType":"git"},{"version":"f34d7a5b7010b82fe97da95496b9971435530062","status":"affected","lessThan":"ae0e61d95677efa778379853e495d748e6efbf95","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98695"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"2.6.26","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.26","versionType":"semver"},{"version":"5.10.273","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.224","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.160","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.113","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.56","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.10","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-98695"}],"remediation":[],"references":["https://git.kernel.org/stable/c/c7ef25e96dc3f808eb891bbbd43b6a682846eb0c","https://git.kernel.org/stable/c/98f0a25134bfce44ebd1db0341fa0e8603ff276d","https://git.kernel.org/stable/c/3a728adbed9fd822f99a9d9c5ebad5c3b565ba4a","https://git.kernel.org/stable/c/24d6edb6bd7f7a9e6cee2f8fe435781daab8aa0f","https://git.kernel.org/stable/c/ae0da9a5c1ca95c20cc5feffd511ce6eae75924e","https://git.kernel.org/stable/c/4597ddd6168ae2a4123404e5f0871f1070dc7773","https://git.kernel.org/stable/c/7912a95d1345c77d8d63b530b00c118700b78abd","https://git.kernel.org/stable/c/ae0e61d95677efa778379853e495d748e6efbf95"],"sources":[{"name":"CVE","id":"CVE-2026-98695","modified":"2026-10-30T12:38:47.405Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-98695"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T14:02:21.503Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T22:15:32.260Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}