Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-22T00:00:00 kernel: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-367

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed.

A flaw was found in the Linux kernel. A race condition exists in the `kbd_keycode()` function within the virtual terminal (vt) subsystem. This occurs when `kbd_keycode()` attempts to read a terminal (tty) reference without properly acquiring and holding it, while the `con_shutdown()` function can concurrently clear the same reference. This timing vulnerability can lead to a use-after-free condition, potentially causing system instability or a denial of service (DoS) for a local attacker.

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Fix deferred kernel Red Hat Enterprise Linux 7 Fix deferred kernel-rt Red Hat Enterprise Linux 8 Fix deferred kernel Red Hat Enterprise Linux 8 Fix deferred kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-74675 https://nvd.nist.gov/vuln/detail/CVE-2026-74675 https://lore.kernel.org/linux-cve-announce/2026082230-CVE-2026-74675-fffa@gregkh/T