CVE-2026-74675 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed.

Is your site exposed to CVE-2026-74675?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/38400673c9bfb39cfc87539e1a072087e98f4e4f https://git.kernel.org/stable/c/38a0aa593ebc275aea6f79534d07f44e43768ce6 https://git.kernel.org/stable/c/3f6b1d3fcfc26dc3fc85262f753439df93b055b4 https://git.kernel.org/stable/c/b664592e9ba8c47c9e23408db7ba52eb9f946c8a https://git.kernel.org/stable/c/b84fd400f80adf4d1c88fbce50ae1cf2f8119e65 https://git.kernel.org/stable/c/cab5a342f0589334046741006d8a280514f94235 https://git.kernel.org/stable/c/cc4a1a2ce0c58eafd477effb055863935260ddc1 https://git.kernel.org/stable/c/e25d47a526939ad44b75f778b8a7500562b84fc1

Frequently Asked Questions

What is CVE-2026-74675? +

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->port.tty without acquiring a tty reference, racing against con_shutdown() which clears port.tty under a different lock. Use tty_port_tty_get()/tty_kref_put() to hold a proper reference for the duration the tty pointer is needed. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-74675? +

CVE-2026-74675 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-74675? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-74675