{"metadata": {"vulnerability": "CVE-2026-98953", "count": 18, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-25T10:25:14.382Z", "date_only": false, "value": "2026-09-25T10:25:14.382Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98953", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:04:29.738Z", "date_only": false, "value": "2026-10-23T13:04:29.738264Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490363220915972", "record": "CVE-2026-98953", "field": "creation_timestamp", "uuid": "3f169a23-0446-4706-945b-d66a9c4a2ab6", "content": "CVE-2026-98953 devlink: fix devlink_rel reference leak when notify work is pending In the Linux kernel, the following vulnerability has been resolved:\ndevlink: fix devlink_rel reference leak when notify work is pending\ndevlink_rel_nested_in_notify_work_schedule() takes a reference on thedevlink_rel for the notify work and then queues the work, ignoring thereturn value of schedule_delayed_work(). If the work is already pending,nothing new is queued, the work runs only once and drops only onereference, so the extra one is leaked together with the devlink_rel andits index in devlink_rels.\nThis is easy to hit. devl_register() of a nested instance queues thework, and if the instance is unregistered before the work has run,devlink_rel_put() queues it again while it is still pending. The workalso keeps rescheduling itself for as long as the parent devlink lockcannot be taken, which widens the window. Registering and unregisteringa nested devlink instance 100 times while holding the parent lock leaksall 100 devlink_rel objects.\nThe reschedule path in devlink_rel_nested_in_notify_work() has the sameproblem: if the work was queued again while it was running, thereference it holds is never dropped.\nDrop the reference in both places when the work was already pending.The pending work holds its own reference, so this can not be the lastone.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98953https://git.kernel.org/stable/c/8c7830e0120e6e1f5084212fd5b79b3092496f87https://git.kernel.org/stable/c/8de57bfec3825effb57fe4d25da98ec3b8fda4c6https://git.kernel.org/stable/c/dc2e787b5fb474241c8a6d18fdacb44adc6d571fhttps://git.kernel.org/stable/c/c5381ae1cd1481cc431c2bd79460472c6f1d3ce3#kernel #Linux#CVE_2026_98953#bot", "url": "https://infosec.exchange/users/cve/statuses/117490363220915972"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98953", "record": "UBUNTU-CVE-2026-98953", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:16Z", "date_only": false, "value": "2026-10-23T13:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5648-X8RM-28P3", "record": "GHSA-5648-X8RM-28P3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T13:17:16.480Z", "date_only": false, "value": "2026-10-23T13:17:16.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98953", "record": "FKIE_CVE-2026-98953", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:16.480Z", "date_only": false, "value": "2026-10-23T13:17:16.480", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98953", "record": "FKIE_CVE-2026-98953", "field": "lastModified"}, {"timestamp": "2026-10-23T15:31:32Z", "date_only": false, "value": "2026-10-23T15:31:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5648-X8RM-28P3", "record": "GHSA-5648-X8RM-28P3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T15:31:32Z", "date_only": false, "value": "2026-10-23T15:31:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5648-X8RM-28P3", "record": "GHSA-5648-X8RM-28P3", "field": "modified"}, {"timestamp": "2026-10-24T01:09:34Z", "date_only": false, "value": "2026-10-24T01:09:34.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98953", "record": "MSRC_CVE-2026-98953", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T01:09:34Z", "date_only": false, "value": "2026-10-24T01:09:34.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98953", "record": "MSRC_CVE-2026-98953", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-24T01:09:34Z", "date_only": false, "value": "2026-10-24T01:09:34.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98953", "record": "MSRC_CVE-2026-98953", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T07:00:42.696Z", "date_only": false, "value": "2026-10-24T07:00:42.696Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98953", "record": "MSRC_CVE-2026-98953", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-28T06:07:51.827Z", "date_only": false, "value": "2026-10-28T06:07:51.827292Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98953", "record": "BELL-CVE-2026-98953", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:31:41.300Z", "date_only": false, "value": "2026-10-28T06:31:41.300667Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98953", "record": "BELL-CVE-2026-98953", "field": "modified"}, {"timestamp": "2026-10-28T23:51:52Z", "date_only": false, "value": "2026-10-28T23:51:52Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98953", "record": "UBUNTU-CVE-2026-98953", "field": "modified"}], "metrics": {"as_of": "2026-10-29T13:38:54.325Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 523181.310232, "hours": 145.32814173111112, "days": 6.0553392387962965, "min_seconds": 523181.310232, "max_seconds": 523181.310232, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:19:13.015Z", "date_only": false, "value": "2026-10-23T12:19:13.015Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T13:38:54.325Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}