{"metadata": {"vulnerability": "CVE-2026-98427", "count": 25, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 16}}, "data": [{"timestamp": "2026-09-25T10:25:14.348Z", "date_only": false, "value": "2026-09-25T10:25:14.348Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98427", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98427", "record": "UBUNTU-CVE-2026-98427", "field": "published"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98427", "record": "UBUNTU-CVE-2026-98427", "field": "modified"}, {"timestamp": "2026-10-14T13:27:53.770Z", "date_only": false, "value": "2026-10-14T13:27:53.770Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98427", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T13:27:53.770Z", "date_only": false, "value": "2026-10-14T13:27:53.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98427", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:27:53.770Z", "date_only": false, "value": "2026-10-14T13:27:53.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98427", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:17:54Z", "date_only": false, "value": "2026-10-14T14:17:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5WV6-6GGH-345R", "record": "GHSA-5WV6-6GGH-345R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T14:17:54.343Z", "date_only": false, "value": "2026-10-14T14:17:54.343", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98427", "record": "FKIE_CVE-2026-98427", "field": "published"}, {"timestamp": "2026-10-14T14:17:54.343Z", "date_only": false, "value": "2026-10-14T14:17:54.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98427", "record": "FKIE_CVE-2026-98427", "field": "lastModified"}, {"timestamp": "2026-10-14T15:32:21Z", "date_only": false, "value": "2026-10-14T15:32:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5WV6-6GGH-345R", "record": "GHSA-5WV6-6GGH-345R", "field": "published"}, {"timestamp": "2026-10-14T15:32:21Z", "date_only": false, "value": "2026-10-14T15:32:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5WV6-6GGH-345R", "record": "GHSA-5WV6-6GGH-345R", "field": "modified"}, {"timestamp": "2026-10-14T18:50:20.508Z", "date_only": false, "value": "2026-10-14T18:50:20.508939Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440762340694693", "record": "CVE-2026-98427", "field": "creation_timestamp", "uuid": "5cc7cf1b-d12b-4dde-b04f-0229ebf88d3c", "content": "CVE-2026-98427 net/sched: codel: bound the dropping loop per dequeue call In the Linux kernel, the following vulnerability has been resolved:\nnet/sched: codel: bound the dropping loop per dequeue call\nThe CoDel control law schedules the next drop one interval/sqrt(count)after the previous drop, using the configured interval(codel_params.interval). For very small intervals the scheduled steprounds down to zero, so the dropping loop in codel_dequeue() neveradvances and drains the entire backlog under the qdisc lock in onecall - an unprivileged user can trigger a soft lockup this way.\nFix in the shared codel code used by both codel and fq_codel:\n1. Make the control-law step at least 1 tick so the dropping loop   always moves forward.\n2. Cap the dropping loop at CODEL_MAX_DROPS_PER_DEQUEUE (256) drops   per codel_dequeue() call, resyncing drop_next to now when the cap   is hit: the catch-up owed to the loop grows with the idle gap and   the backlog, which no interval threshold can bound. This is a   deliberate behaviour change after long idle gaps.\nThe cap applies to fq_codel (4b549a2ef4be) and the mac80211 TXQ path(fixed interval, cap only).\nThe target sojourn delay (codel_params.target) is not validated: itdoes not feed the control law, so a sub-tick value is aggressiverather than deadlock-prone.\nConditions to recreate the bug:  - tc qdisc add dev lo root handle 1: tbf rate 1kbit burst 2kb limit 1000000  - tc qdisc add dev lo parent 1:1 handle 10: codel interval 2us target 1ms noecn limit 1000000 (same for fq_codel)  - unpatched kernel: tc accepts it; a UDP flood under the 1kbit tbf    soft-lockups (watchdog: BUG: soft lockup) while one    codel_dequeue() call drops the backlog under the qdisc lock  - patched kernel: same setup, at most 256 drops per dequeue call,    no soft lockup\nTesting: claim reproducer and interval 2us/3us variants run clean;tdc qdisc category passes (see the selftests patch).\nhttps://www.cve.org/CVERecord?id=CVE-2026-98427https://git.kernel.org/stable/c/bacd72289d34d8c05b7de5a12448b87b6dd93878https://git.kernel.org/stable/c/7f4a5ec6258fd7c92633ec4b0493fc51166d9398#kernel #Linux#CVE_2026_98427#bot", "url": "https://infosec.exchange/users/cve/statuses/117440762340694693"}, {"timestamp": "2026-10-16T01:03:38Z", "date_only": false, "value": "2026-10-16T01:03:38.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98427", "record": "MSRC_CVE-2026-98427", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T01:03:38Z", "date_only": false, "value": "2026-10-16T01:03:38.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98427", "record": "MSRC_CVE-2026-98427", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-16T01:03:38Z", "date_only": false, "value": "2026-10-16T01:03:38.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98427", "record": "MSRC_CVE-2026-98427", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T01:03:38Z", "date_only": false, "value": "2026-10-16T01:03:38.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98427", "record": "MSRC_CVE-2026-98427", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T06:05:36.646Z", "date_only": false, "value": "2026-10-16T06:05:36.646526Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98427", "record": "BELL-CVE-2026-98427", "field": "published"}, {"timestamp": "2026-10-16T06:42:48.435Z", "date_only": false, "value": "2026-10-16T06:42:48.43595Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98427", "record": "BELL-CVE-2026-98427", "field": "modified"}, {"timestamp": "2026-10-16T07:00:53.913Z", "date_only": false, "value": "2026-10-16T07:00:53.913Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98427", "record": "MSRC_CVE-2026-98427", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-18T10:27:42Z", "date_only": false, "value": "2026-10-18T10:27:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-18T10:27:42Z", "date_only": false, "value": "2026-10-18T10:27:42Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12165-1", "record": "OPENSUSE-SU-2026:12165-1", "field": "document.tracking.current_release_date"}]}