CVE-2026-74675

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed.

Package Linux Kernel
Published 2026-08-22
Last modified 2026-08-22
Patch available
Yes

Affected versions

Fixed in 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9, 7.2 and their respective stable series.

Fixed in
✓ 5.10.265 5.10.x ✓ 5.15.216 5.15.x ✓ 6.1.183 6.1.x ✓ 6.6.152 6.6.x ✓ 6.12.104 6.12.x ✓ 6.18.45 6.18.x ✓ 7.1.9 7.1.x ✓ 7.2

Frequently asked questions

  • What is CVE-2026-74675?

    CVE-2026-74675 is a unscored severity Linux kernel vulnerability . CVE-2026-74675 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-74675?

    Yes. CVE-2026-74675 has been patched. Fixed versions include 5.10.265, 5.15.216, 6.1.183 and others.

  • Is CVE-2026-74675 actively exploited?

    No. CVE-2026-74675 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.