The vulnerability in the `qcom_geni_serial_handle_tx_dma()` function of the `drivers/tty/serial/qcom_geni_serial.c` driver of the TTY console driver in the Linux kernel’s serial port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcomgeniserialhandletxdma function in the drivers/tty/serial/qcomgeniserial.c driver of the TTY console driver in the Linux kernel’s serial port is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-89093

In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty register driver failure If tty register driver fails, it drops the reference, but fails to set the global dbc tty driver to NULL, causing the unregister to be called again when module exits. On...

The vulnerability of the dw8250_probe() function in the drivers/tty/serial/8250/8250_dw.c file of the console TTY driver for the serial port of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the tty_driver_lookup_tty() function in the drivers/tty/tty_io.c file of the console TTY driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ttydriverlookuptty function in the drivers/tty/ttyio.c file of the TTY console driver in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the serial8250_init_port() function in the drivers/tty/serial/8250/8250_port.c file of the console TTY driver in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the serial8250initport function in the drivers/tty/serial/8250/8250port.c file of the console TTY driver in the Linux kernel is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Important: kbd

Issue Overview: openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the...

Amazon Linux 2023 : kbd, kbd-legacy, kbd-misc (ALAS2023-2026-2109)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2109 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateus...

Important: kbd

Issue Overview: openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the...

OESA-2026-3505 kbd security update

The project contains tools for managing Linux console ,including Linux console,virtual terminals, keyboard, etc, mainly, what they do is loading console fonts and keyboard maps. Security Fixes: openvt -u is intended to identify the owner of the current VT and then execute login as that user from ...

CVE-2026-58093

The FreeBSD kernel contains a use-after-free vulnerability in the tty module's TIOCSCTTY ioctl handler. The issue stems from a race condition where the handler drops the tty lock to acquire the process tree lock but fails to revalidate the terminal's state upon reacquiring the lock. This allows a...

EUVD-2026-66250

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

PT-2026-81936

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104825 advisory. A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

CVE-2026-58093: Concurrent Execution using Shared Resource with Improper Synchronization

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098806 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queu...

The vulnerability of the `serial_core_add_one_port()` function in the `drivers/tty/serial/serial_core.c` file of the console TTY driver in the Linux kernel’s main thread allows a attacker to cause a service failure.

The vulnerability of the serialcoreaddoneport function in the drivers/tty/serial/serialcore.c file of the TTY driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

FreeBSD-SA-26:62.tty

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:62.tty Security Advisory The FreeBSD Project Topic: Kernel use-after-free via tty ioctls Category: core Module: tty Announced: 2026-08-25 Credits: tsune of...

The vulnerability of the uart_write_room() function in the drivers/tty/serial/serial_core.c file of the console TTY driver in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the uartwriteroom function in the drivers/tty/serial/serialcore.c file of the console TTY driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service...

FreeBSD -- Kernel use-after-free via tty ioctls

Problem Description: The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling proces...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: added a sanity check for gsm-receive in gsmreceivebuf A null pointer dereference can occur when attempting to access the “gsm-receive” function in gsmldreceivebuf. Currently, the code assumes that gsm-recieve is only...