{"metadata": {"vulnerability": "CVE-2026-99025", "count": 19, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-25T10:25:14.386Z", "date_only": false, "value": "2026-09-25T10:25:14.386Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99025", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99025", "record": "UBUNTU-CVE-2026-99025", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:25Z", "date_only": false, "value": "2026-10-23T13:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-25WV-6MRM-3CPW", "record": "GHSA-25WV-6MRM-3CPW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T13:17:25.480Z", "date_only": false, "value": "2026-10-23T13:17:25.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99025", "record": "FKIE_CVE-2026-99025", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:25.480Z", "date_only": false, "value": "2026-10-23T13:17:25.480", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99025", "record": "FKIE_CVE-2026-99025", "field": "lastModified"}, {"timestamp": "2026-10-23T13:56:58.611Z", "date_only": false, "value": "2026-10-23T13:56:58.611898Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490569527481179", "record": "CVE-2026-99025", "field": "creation_timestamp", "uuid": "1f49388b-55a4-4e12-afd5-44101b302253", "content": "CVE-2026-99025 openvswitch: fix soft lockup in the netlink flow dump In the Linux kernel, the following vulnerability has been resolved:\nopenvswitch: fix soft lockup in the netlink flow dump\nA production compute node carrying a few thousand datapath flows hit asoft lockup inside a single netlink flow dump and panicked.\novs_flow_cmd_dump() calls ovs_flow_stats_get() for every flow itemits, and that releases stats->lock with spin_unlock_bh() once perCPU that has touched the flow. Every release is a local_bh_enable(),and each one runs the pending softirq backlog in the dumping thread'sown context.\nThe skb bounds the flows one callback emits, but not the softirq workit absorbs. On a CPU that carries the box's packet load the backlogrefills as fast as it drains, so the dumping thread becomes that CPU'ssoftirq engine. It never sleeps and it has no reschedule point, sounder voluntary preemption nothing can take the CPU away from it:neither the ksoftirqd the kernel woke to take the work over, nor thestopper thread the softlockup detector dispatches to refresh itstimestamp.\nHold BH off across the whole callback instead, the wayctnetlink_dump_table() does, so the nested spin_unlock_bh() stopdraining softirqs. The loop already runs under rcu_read_lock() andcannot sleep. What it gives up is preemption under CONFIG_PREEMPT,since a BH-off region is not preemptible outside PREEMPT_RT. Theregion stays short: the skb caps the flows one callback emits, andempty buckets cost no skb space but are each visited once per dump, asthe cursor only moves forward. The table grows on insert and shrinksonly on flush, so the walk is bounded by the largest flow count thedatapath has held. The softirq backlog the callback used to absorb hasno bound at all.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99025https://git.kernel.org/stable/c/c995c52eba1926a5e82823fa5573a6f1b1010e5dhttps://git.kernel.org/stable/c/b872de585edff534056c65ba30970b68499fca14https://git.kernel.org/stable/c/55f12552b00a34ca7ab5cf2d2b5ed02f8f06a965https://git.kernel.org/stable/c/80db24f3c16fdeef85460d9d66a4aae7a9cb92b4https://git.kernel.org/stable/c/aaaaf87ea99b8766c9a8aa0e71aa42e6bc8a5320#kernel #Linux#CVE_2026_99025#bot", "url": "https://infosec.exchange/users/cve/statuses/117490569527481179"}, {"timestamp": "2026-10-23T15:31:35Z", "date_only": false, "value": "2026-10-23T15:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-25WV-6MRM-3CPW", "record": "GHSA-25WV-6MRM-3CPW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T15:31:35Z", "date_only": false, "value": "2026-10-23T15:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-25WV-6MRM-3CPW", "record": "GHSA-25WV-6MRM-3CPW", "field": "modified"}, {"timestamp": "2026-10-25T01:03:45Z", "date_only": false, "value": "2026-10-25T01:03:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99025", "record": "MSRC_CVE-2026-99025", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-25T01:03:45Z", "date_only": false, "value": "2026-10-25T01:03:45.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99025", "record": "MSRC_CVE-2026-99025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-25T01:04:52Z", "date_only": false, "value": "2026-10-25T01:04:52.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99025", "record": "MSRC_CVE-2026-99025", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-25T01:04:52Z", "date_only": false, "value": "2026-10-25T01:04:52.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99025", "record": "MSRC_CVE-2026-99025", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-25T07:01:02.654Z", "date_only": false, "value": "2026-10-25T07:01:02.654Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99025", "record": "MSRC_CVE-2026-99025", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-28T06:07:56.236Z", "date_only": false, "value": "2026-10-28T06:07:56.236092Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99025", "record": "BELL-CVE-2026-99025", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:31:46.188Z", "date_only": false, "value": "2026-10-28T06:31:46.188586Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99025", "record": "BELL-CVE-2026-99025", "field": "modified"}, {"timestamp": "2026-10-28T23:52:05Z", "date_only": false, "value": "2026-10-28T23:52:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99025", "record": "UBUNTU-CVE-2026-99025", "field": "modified"}], "metrics": {"as_of": "2026-10-29T05:58:19.155Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 495426.745495, "hours": 137.61854041527778, "days": 5.734105850636574, "min_seconds": 495426.745495, "max_seconds": 495426.745495, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:21:12.410Z", "date_only": false, "value": "2026-10-23T12:21:12.410Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99025", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T05:58:19.155Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}