---
id: CVE-2026-98753
title: 'tty: tty_port: restore TTY_IO_ERROR on activation failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tty: tty_port: restore TTY_IO_ERROR on activation failure

  Make sure to restore the TTY_IO_ERROR flag if activation fails to
  prevent I/O attempts on a port that is gone…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 <
    34d4f67472ef7a744970b772a8565ddc727788e2
  - >-
    Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 <
    7021acc84c2e0add77a1a33152e3a1e428fdbfdb
  - >-
    Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 <
    6388409b711eb91b14fa075a4d861ccc4df1cfe7
  - >-
    Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 <
    56964f6a31238fb41d5830bb42520c5b10ff7d8f
  - Linux 2.6.33
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:47:37.700Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98753'
references:
  - url: 'https://git.kernel.org/stable/c/34d4f67472ef7a744970b772a8565ddc727788e2'
  - url: 'https://git.kernel.org/stable/c/7021acc84c2e0add77a1a33152e3a1e428fdbfdb'
  - url: 'https://git.kernel.org/stable/c/6388409b711eb91b14fa075a4d861ccc4df1cfe7'
  - url: 'https://git.kernel.org/stable/c/56964f6a31238fb41d5830bb42520c5b10ff7d8f'
tags:
  - cve.org
ingestedAt: '2026-10-18T16:47:32.499Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

tty: tty_port: restore TTY_IO_ERROR on activation failure

Make sure to restore the TTY_IO_ERROR flag if activation fails to
prevent I/O attempts on a port that is gone or powered down.

This specifically avoids issues like kernel panic due to unclocked
accesses or NULL-pointer dereferences when accessing powered down or
deregistered ports when a TTY ioctl races with hangup and open.

Note that the flag is set again in tty_port_close() but not restoring it
on activation failure leaves a window where drivers fail to handle the
ioctl-hangup race.

## Affected

- `Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 < 34d4f67472ef7a744970b772a8565ddc727788e2`
- `Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 < 7021acc84c2e0add77a1a33152e3a1e428fdbfdb`
- `Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 < 6388409b711eb91b14fa075a4d861ccc4df1cfe7`
- `Linux >= a9a37ec33a1b3e66b260ac1c29bff0aec8b89ae4 < 56964f6a31238fb41d5830bb42520c5b10ff7d8f`
- `Linux 2.6.33`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.