{"metadata": {"vulnerability": "CVE-2026-98984", "count": 19, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-25T10:25:14.384Z", "date_only": false, "value": "2026-09-25T10:25:14.384Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98984", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98984", "record": "UBUNTU-CVE-2026-98984", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:20Z", "date_only": false, "value": "2026-10-23T13:17:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J5F8-8HQX-2HCR", "record": "GHSA-J5F8-8HQX-2HCR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T13:17:20.287Z", "date_only": false, "value": "2026-10-23T13:17:20.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98984", "record": "FKIE_CVE-2026-98984", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:20.287Z", "date_only": false, "value": "2026-10-23T13:17:20.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98984", "record": "FKIE_CVE-2026-98984", "field": "lastModified"}, {"timestamp": "2026-10-23T13:29:23.862Z", "date_only": false, "value": "2026-10-23T13:29:23.862846Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490461129457721", "record": "CVE-2026-98984", "field": "creation_timestamp", "uuid": "4583fad3-0d2f-42cd-b468-45b2bd7cfd4a", "content": "CVE-2026-98984 dcache: don't put a mountpoint on a dentry that's being removed In the Linux kernel, the following vulnerability has been resolved:\ndcache: don't put a mountpoint on a dentry that's being removed\nrmdir(), unlink() and rename() call dont_mount() on the victim and thendetach_mounts() with the victim's inode locked. do_lock_mount() takesthe inode lock of the mountpoint and checks cant_mount() so a mountcan't show up after detach_mounts().\nBut attach_recursive_mnt() makes a second mountpoint for the root of thesource mount so that the mounts already located at the destination canbe put on top of it. No inode is locked for that one and d_set_mounted()only refuses a dentry that is unlinked. Between detach_mounts() andd_delete() the victim is still hashed:\n  rmrace: b passed dont_mount() and detach_mounts(), sleeping  T2: move_mount(S, /tmp/plcant/x, BENEATH) = 0 errno 0 ()  T1: rmdir(/tmp/plcant/d/b) = 0 errno 0      109 107 0:61 /d/b//deleted /tmp/plcant/x rw,relatime - tmpfs tmpfs rw      108 109 0:63 / /tmp/plcant/x rw,relatime - tmpfs T rw\nA bind mount of the directory that's being removed is moved beneath anexisting mount while the rmdir() is located between the two calls. Themount ends up on the removed directory and nothing will ever detach it.\nCheck cant_mount() in d_set_mounted() as well. dont_mount() raises theflag under d_lock before detach_mounts() runs so either the mountpointis set first and detach_mounts() finds the mount or the flag is seen andthe mount is refused.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98984https://git.kernel.org/stable/c/5e6bfd9f249f2c74bb63c0f06ad959da3bee0971https://git.kernel.org/stable/c/793cb67b0f52d00c67bd0e76bc57455b5c70ebb8https://git.kernel.org/stable/c/390ddcea2a8aca411b931a8e2863a80ccca8d2b3https://git.kernel.org/stable/c/30a1625022411a387cce9239408ece9955bc9c58https://git.kernel.org/stable/c/75f4197f1e11d2eb75c2d6f916a7d4764db621e5#kernel #Linux#CVE_2026_98984#bot", "url": "https://infosec.exchange/users/cve/statuses/117490461129457721"}, {"timestamp": "2026-10-23T15:31:33Z", "date_only": false, "value": "2026-10-23T15:31:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J5F8-8HQX-2HCR", "record": "GHSA-J5F8-8HQX-2HCR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T15:31:33Z", "date_only": false, "value": "2026-10-23T15:31:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J5F8-8HQX-2HCR", "record": "GHSA-J5F8-8HQX-2HCR", "field": "modified"}, {"timestamp": "2026-10-24T01:10:58Z", "date_only": false, "value": "2026-10-24T01:10:58.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98984", "record": "MSRC_CVE-2026-98984", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T01:10:58Z", "date_only": false, "value": "2026-10-24T01:10:58.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98984", "record": "MSRC_CVE-2026-98984", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-25T01:02:49Z", "date_only": false, "value": "2026-10-25T01:02:49.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98984", "record": "MSRC_CVE-2026-98984", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-25T01:02:49Z", "date_only": false, "value": "2026-10-25T01:02:49.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98984", "record": "MSRC_CVE-2026-98984", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-25T07:01:02.666Z", "date_only": false, "value": "2026-10-25T07:01:02.666Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98984", "record": "MSRC_CVE-2026-98984", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-28T06:07:53.718Z", "date_only": false, "value": "2026-10-28T06:07:53.718049Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98984", "record": "BELL-CVE-2026-98984", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:31:43.402Z", "date_only": false, "value": "2026-10-28T06:31:43.402683Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98984", "record": "BELL-CVE-2026-98984", "field": "modified"}, {"timestamp": "2026-10-28T23:51:58Z", "date_only": false, "value": "2026-10-28T23:51:58Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98984", "record": "UBUNTU-CVE-2026-98984", "field": "modified"}], "metrics": {"as_of": "2026-10-30T01:58:48.818Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 567526.533256, "hours": 157.6462592377778, "days": 6.568594134907408, "min_seconds": 567526.533256, "max_seconds": 567526.533256, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:20:02.285Z", "date_only": false, "value": "2026-10-23T12:20:02.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98984", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T01:58:48.818Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}