CVE-2026-98755
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated struct vio_vcc pkt was partially initialized, leaving the tag.stype_env field uninitialized before being sent via ldc_write(), potentially leaking kernel stack data to the LDC peer.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 18, 2026
First seenOct 18, 2026
How to fix
Update
- Linux Linux9e2eedb3611c1a3a377105cb26af52731e826fa5, 360111628a968ebc8e6da400b28f23ae317d4e04, 639178bc8e77aad307a9ee5e62471c5dcc8dda67, 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebed, 6f1a08ef02825b440126c406ea63ef6128888e15, 4335278d0e75395cbfaf71c84b521df56d69e936, 399aa38af1d78001612e3130b2056ea392a355ca, 1f71f565e3585da1098ff19ca3c24687dab59185 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 9e2eedb3611c1a3a377105cb26af52731e826fa5, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 360111628a968ebc8e6da400b28f23ae317d4e04, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 639178bc8e77aad307a9ee5e62471c5dcc8dda67, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebed, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 6f1a08ef02825b440126c406ea63ef6128888e15, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 4335278d0e75395cbfaf71c84b521df56d69e936, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 399aa38af1d78001612e3130b2056ea392a355ca, 8868e44a56160328cd4003d95f4083f64b136e33 ≤ v < 1f71f565e3585da1098ff19ca3c24687dab59185, 4.14 | 9e2eedb3611c1a3a377105cb26af52731e826fa5, 360111628a968ebc8e6da400b28f23ae317d4e04, 639178bc8e77aad307a9ee5e62471c5dcc8dda67, 4b59afc8af3143ae03e4f9b81ca66aa5a1c1ebed, 6f1a08ef02825b440126c406ea63ef6128888e15, 4335278d0e75395cbfaf71c84b521df56d69e936, 399aa38af1d78001612e3130b2056ea392a355ca, 1f71f565e3585da1098ff19ca3c24687dab59185 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.