An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.3 · linux, redhat, debianNVD modified 2026-10-14 13:17
Affected (CPE criteria) 4
cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
References 7
- https://bugzilla.redhat.com/show_bug.cgi?id=2078466 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2022/q2/155 Exploit, Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2078466 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2022/q2/155 Exploit, Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html