{"metadata": {"vulnerability": "CVE-2026-99015", "count": 22, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-09-25T10:25:14.385Z", "date_only": false, "value": "2026-09-25T10:25:14.385Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:20:41.608Z", "date_only": false, "value": "2026-10-23T12:20:41.608Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99015", "record": "UBUNTU-CVE-2026-99015", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:24Z", "date_only": false, "value": "2026-10-23T13:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FJ4J-9CQW-5CXW", "record": "GHSA-FJ4J-9CQW-5CXW", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:24.270Z", "date_only": false, "value": "2026-10-23T13:17:24.270", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99015", "record": "FKIE_CVE-2026-99015", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:50:16.789Z", "date_only": false, "value": "2026-10-23T13:50:16.789588Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490543092969594", "record": "CVE-2026-99015", "field": "creation_timestamp", "uuid": "9cb09215-2c53-4523-a144-a7e3b9a71deb", "content": "CVE-2026-99015 Bluetooth: hci_sock: Serialize dead-device detachment In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: hci_sock: Serialize dead-device detachment\nRebinding an HCI socket after its controller is unregistered can racemonitor control replay and crash the kernel. hci_sock_bind() clearshci_pi(sk)->hdev and drops the device reference under only the socketlock, whereas send_monitor_control_replay() holds hci_sk_list.lock forreading.\nReplay can observe a non-NULL hdev, then bind can clear it and drop thelast reference before create_monitor_ctrl_open() reads hdev->id. Thiscan cause a NULL pointer dereference if the pointer is reloaded, or ause-after-free if the old pointer is retained.\nThe kernel reported:\n  KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]  RIP: 0010:create_monitor_ctrl_open+0x579/0x800  Call Trace:   hci_sock_bind+0xd96/0x1190   __sys_bind+0x166/0x200   __x64_sys_bind+0x6d/0xb0   do_syscall_64+0xdd/0x4a0   entry_SYSCALL_64_after_hwframe+0x77/0x7f\nThe same missing serialization lets hci_send_to_sock() select a socketfor the old device and queue its frame after bind has detached the socketor installed a new binding.\nTake hci_sk_list.lock for writing when clearing the device pointer andresetting the socket state. This waits for existing replay and deliveryreaders to finish before detachment and prevents later readers fromusing the old binding. Keep hci_dev_put() outside the critical sectionbecause the final device release can sleep.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99015https://git.kernel.org/stable/c/37cef0c8fb537f40600910d2c2e5f2d5509305f3https://git.kernel.org/stable/c/76f2e2665697340ac719e7ff1bf148dd014e55c1https://git.kernel.org/stable/c/c3d2799877906d0c8392d96e14216cd82b020330https://git.kernel.org/stable/c/e660a22402944f2615a16fde7129a3c497537329https://git.kernel.org/stable/c/381a0925c556a8d91a80a9b9e3e86651d60ffee3#kernel #Linux#CVE_2026_99015#bot", "url": "https://infosec.exchange/users/cve/statuses/117490543092969594"}, {"timestamp": "2026-10-23T15:31:34Z", "date_only": false, "value": "2026-10-23T15:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FJ4J-9CQW-5CXW", "record": "GHSA-FJ4J-9CQW-5CXW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:03:27Z", "date_only": false, "value": "2026-10-25T01:03:27.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T01:03:27Z", "date_only": false, "value": "2026-10-25T01:03:27.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-25T01:03:27Z", "date_only": false, "value": "2026-10-25T01:03:27.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:04:31Z", "date_only": false, "value": "2026-10-25T01:04:31.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-26T14:46:23Z", "date_only": false, "value": "2026-10-26T14:46:23.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:55.646Z", "date_only": false, "value": "2026-10-28T06:07:55.646533Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99015", "record": "BELL-CVE-2026-99015", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:40:57.696Z", "date_only": false, "value": "2026-10-30T12:40:57.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:40:57.696Z", "date_only": false, "value": "2026-10-30T12:40:57.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99015", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:37.487Z", "date_only": false, "value": "2026-10-30T13:21:37.487", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99015", "record": "FKIE_CVE-2026-99015", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:15Z", "date_only": false, "value": "2026-10-30T15:34:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FJ4J-9CQW-5CXW", "record": "GHSA-FJ4J-9CQW-5CXW", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:03:32Z", "date_only": false, "value": "2026-10-30T19:03:32Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99015", "record": "UBUNTU-CVE-2026-99015", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T15:03:45Z", "date_only": false, "value": "2026-11-01T15:03:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-01T15:03:45Z", "date_only": false, "value": "2026-11-01T15:03:45.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.149Z", "date_only": false, "value": "2026-11-02T08:02:48.149Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99015", "record": "MSRC_CVE-2026-99015", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T06:23:57.268Z", "date_only": false, "value": "2026-11-03T06:23:57.26843Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99015", "record": "BELL-CVE-2026-99015", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T10:11:30.783Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:20:41.608Z", "date_only": false, "value": "2026-10-23T12:20:41.608Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:20:41.608Z", "date_only": false, "value": "2026-10-23T12:20:41.608Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 942649.175847, "hours": 261.8469932908333, "days": 10.910291387118056, "min_seconds": 942649.175847, "max_seconds": 942649.175847, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:20:41.608Z", "date_only": false, "value": "2026-10-23T12:20:41.608Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99015", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T10:11:30.783Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}