CVE-2026-5398

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The implementation of TIOCNOTTY fails to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process exits, the terminal structure may retain a pointer to freed memory, creating a dangling pointer. A malicious process can exploit this condition to obtain root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.