{"metadata": {"vulnerability": "CVE-2026-98994", "count": 15, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-25T10:25:14.384Z", "date_only": false, "value": "2026-09-25T10:25:14.384Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98994", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98994", "record": "UBUNTU-CVE-2026-98994", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:21Z", "date_only": false, "value": "2026-10-23T13:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2FR8-4RP8-WVJ2", "record": "GHSA-2FR8-4RP8-WVJ2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:21.550Z", "date_only": false, "value": "2026-10-23T13:17:21.550", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98994", "record": "FKIE_CVE-2026-98994", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:21.550Z", "date_only": false, "value": "2026-10-23T13:17:21.550", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98994", "record": "FKIE_CVE-2026-98994", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-23T13:36:07.255Z", "date_only": false, "value": "2026-10-23T13:36:07.255946Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490487566652391", "record": "CVE-2026-98994", "field": "creation_timestamp", "uuid": "f7e8dd76-cef1-4a99-9f50-9bda63e2e50d", "content": "CVE-2026-98994 statmount: read the parent of an unmounted mount under mount_lock In the Linux kernel, the following vulnerability has been resolved:\nstatmount: read the parent of an unmounted mount under mount_lock\nstatmount_mnt_basic() reads the ids of the parent through m->mnt_parentwith namespace_sem held for reading. That's fine for a mount that isin a namespace. Everything above it is pinned by that namespace.\nSTATMOUNT_BY_FD also accepts a file descriptor on a mount that hasbeen unmounted on purpose and that only the file descriptor keeps alive.If that mount stayed attached to its parent when it was unmounted theparent is unmounted as well and nothing pins it for the child.\nThe final mntput() unmounts the children under mount_lock alone andfrees the parent afterwards. Concurrently, statmount_mnt_basic() readsm->mnt_parent twice while that can happen and can easily dereference amount that's already gone.\nRead the parent of an unmounted mount under mount_lock. The parentcan't be put while it is held and both ids come from the same mount. Amounted mount's parent is pinned by the namespace and a mount can'tleave its namespace while namespace_sem is held, so the common casetakes no global lock.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98994https://git.kernel.org/stable/c/98fc6c7b6ca676157d2c780bd0a537b2c10fe08fhttps://git.kernel.org/stable/c/bb46094057520304073130920c223451c2a694a7#kernel #Linux#CVE_2026_98994#bot", "url": "https://infosec.exchange/users/cve/statuses/117490487566652391"}, {"timestamp": "2026-10-23T15:31:34Z", "date_only": false, "value": "2026-10-23T15:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2FR8-4RP8-WVJ2", "record": "GHSA-2FR8-4RP8-WVJ2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:34Z", "date_only": false, "value": "2026-10-23T15:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2FR8-4RP8-WVJ2", "record": "GHSA-2FR8-4RP8-WVJ2", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T06:07:54.348Z", "date_only": false, "value": "2026-10-28T06:07:54.348683Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98994", "record": "BELL-CVE-2026-98994", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:44.900Z", "date_only": false, "value": "2026-10-28T06:31:44.90024Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98994", "record": "BELL-CVE-2026-98994", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T06:31:44.900Z", "date_only": false, "value": "2026-10-28T06:31:44.90024Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98994", "record": "BELL-CVE-2026-98994", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-11-06T17:25:55Z", "date_only": false, "value": "2026-11-06T17:25:55Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98994", "record": "UBUNTU-CVE-2026-98994", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T06:02:59.968Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1273366.72455, "hours": 353.71297904166664, "days": 14.738040793402776, "min_seconds": 1273366.72455, "max_seconds": 1273366.72455, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:20:13.244Z", "date_only": false, "value": "2026-10-23T12:20:13.244Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98994", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T06:02:59.968Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}