{"metadata": {"vulnerability": "CVE-2026-98942", "count": 35, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 26}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.381Z", "date_only": false, "value": "2026-09-25T10:25:14.381Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:12:14.180Z", "date_only": false, "value": "2026-10-23T12:12:14.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:57:06.234Z", "date_only": false, "value": "2026-10-23T12:57:06.234912Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490334152758096", "record": "CVE-2026-98942", "field": "creation_timestamp", "uuid": "fcdc9b19-c1c2-4ef5-a390-622cebd7434c", "content": "CVE-2026-98942 sched_ext: Build the cid tables privately and publish them with RCU In the Linux kernel, the following vulnerability has been resolved:\nsched_ext: Build the cid tables privately and publish them with RCU\nThe cid tables are visible to the cid kfuncs while being modified: thefirst enable publishes the global pointers before filling them,ops.init_cids() overrides rewrite them in place, and re-enables rebuildthem in place. A racing TRACING or SYSCALL program can read unfilledentries, including uninitialized memory in the kmalloc'd tables, or torntopo updates.\nTie the tables' lifetimes to the root sched instead: each root enablebuilds a fresh set privately and publishes the per-table __rcu globals oncethe layout is final, and root disable unpublishes and RCU-frees the set. Anon-NULL global is now always a fully built table which stays valid for thereader's RCU read section, and lookups stay two loads. Kfuncs treat NULL asno-mapping, also after the scheduler exits instead of reporting the stalelast mapping.\nThe cid kfuncs are available whether the root scheduler is cid-form orcpu-form, the latter to allow gradual migration to cids. Every roottherefore builds and publishes a default mapping.\nEvery reader must either be gated on scheduler liveness or NULL-checkinside an RCU read section. Fix the two kfuncs that were neither:scx_bpf_this_cid() read the table with no RCU or preemption protection andscx_bpf_task_cid() relied on KF_RCU, which doesn't put a sleepable programin an RCU read section. The hotplug callbacks are instead serialized byretiring the tables inside the cpus_read_lock() section that clearsscx_root.\nv2: Document why every root builds the tables (desc + cid.c comment).\nhttps://www.cve.org/CVERecord?id=CVE-2026-98942https://git.kernel.org/stable/c/0e1a74369bdbc357d3d9713734418d914a981553https://git.kernel.org/stable/c/3a773220d39ba993dfe5d135f8b610be10794d5d#kernel #Linux#CVE_2026_98942#bot", "url": "https://infosec.exchange/users/cve/statuses/117490334152758096"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98942", "record": "UBUNTU-CVE-2026-98942", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:15Z", "date_only": false, "value": "2026-10-23T13:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RH9V-MPGH-F53X", "record": "GHSA-RH9V-MPGH-F53X", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:15.193Z", "date_only": false, "value": "2026-10-23T13:17:15.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98942", "record": "FKIE_CVE-2026-98942", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:31Z", "date_only": false, "value": "2026-10-23T15:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RH9V-MPGH-F53X", "record": "GHSA-RH9V-MPGH-F53X", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:32Z", "date_only": false, "value": "2026-10-23T15:31:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RH9V-MPGH-F53X", "record": "GHSA-RH9V-MPGH-F53X", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T01:08:59Z", "date_only": false, "value": "2026-10-24T01:08:59.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:08:59Z", "date_only": false, "value": "2026-10-24T01:08:59.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:01:53Z", "date_only": false, "value": "2026-10-25T01:01:53.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.73.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T06:56:52.637Z", "date_only": false, "value": "2026-10-26T06:56:52.637Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T06:56:52.637Z", "date_only": false, "value": "2026-10-26T06:56:52.637Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98942", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T07:17:18.007Z", "date_only": false, "value": "2026-10-26T07:17:18.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98942", "record": "FKIE_CVE-2026-98942", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-26T14:47:09Z", "date_only": false, "value": "2026-10-26T14:47:09.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-27T14:48:41Z", "date_only": false, "value": "2026-10-27T14:48:41.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:41Z", "date_only": false, "value": "2026-10-28T01:49:41.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:41Z", "date_only": false, "value": "2026-10-28T01:49:41.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:51.197Z", "date_only": false, "value": "2026-10-28T06:07:51.197755Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98942", "record": "BELL-CVE-2026-98942", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:40.624Z", "date_only": false, "value": "2026-10-28T06:31:40.624741Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98942", "record": "BELL-CVE-2026-98942", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T06:31:40.624Z", "date_only": false, "value": "2026-10-28T06:31:40.624741Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98942", "record": "BELL-CVE-2026-98942", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-10-28T07:02:50.906Z", "date_only": false, "value": "2026-10-28T07:02:50.906Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98942", "record": "MSRC_CVE-2026-98942", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-12T09:19:25.091Z", "date_only": false, "value": "2026-11-12T09:19:25.091+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-12T14:10:08Z", "date_only": false, "value": "2026-11-12T14:10:08Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98942", "record": "UBUNTU-CVE-2026-98942", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T05:38:39.730Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:12:14.180Z", "date_only": false, "value": "2026-10-23T12:12:14.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:12:14.180Z", "date_only": false, "value": "2026-10-23T12:12:14.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1790785.550353, "hours": 497.4404306536111, "days": 20.72668461056713, "min_seconds": 1790785.550353, "max_seconds": 1790785.550353, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:12:14.180Z", "date_only": false, "value": "2026-10-23T12:12:14.180Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98942", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T05:38:39.730Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}