All vulnerabilities

Servers and applications

CVE-2026-98840

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Severity
Unrated
Published
18 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.6.160, 6.12.113, 6.18.56, 7.1, 7.2, 7.2.10
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 7.2 before 5.10.273
  • From 7.1.2 before 7.2
  • From 7.0.14 before 7.1
  • From 6.19 before 7.2.10
All 15 release lines
  • From 5.10.260 before 5.10.273
  • From 5.11 before 5.15.224
  • From 5.15.211 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.1.177 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.6.144 before 6.6.160
  • From 6.7 before 6.12.113
  • From 6.12.95 before 6.12.113
  • From 6.13 before 6.18.56
  • From 6.18.37 before 6.18.56
  • From 6.19 before 7.2.10
  • From 7.0.14 before 7.1
  • From 7.1.2 before 7.2
  • From 7.2 before 5.10.273

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98840