CVE-2026-53385

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the vcs write() function. When the console lock is temporarily released to copy data from userspace, the vc data pointer obtained from vcs vc() can become stale. If the virtual console is deallocated before the lock is re-acquired and the pointer is re-validated, vcs vc() returns NULL. Despite this, the system continues to call vcs scr updated(vc) with the NULL pointer, resulting in a null pointer dereference within the vcs notifier() function when it attempts to access param->vc. A null pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically causing the system to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.