{"metadata": {"vulnerability": "CVE-2026-99144", "count": 22, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.395Z", "date_only": false, "value": "2026-09-25T10:25:14.395Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99144", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T11:13:30.841Z", "date_only": false, "value": "2026-10-28T11:13:30.841438Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518238314398104", "record": "CVE-2026-99144", "field": "creation_timestamp", "uuid": "21ef088b-77b5-47b1-b394-5cd6493f74bc", "content": "CVE-2026-99144 sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue In the Linux kernel, the following vulnerability has been resolved:\nsched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue\nA deferred reenqueue can read a freed user DSQ. The request stays on itsCPU's deferred list until run_deferred() takes it, and the RCU callback thatfrees the DSQ assumes that the grace period has flushed it, so exit_dsq()checks the per-CPU node without the deferred list lock. A grace period waitsfor readers in flight, not for a pending run_deferred(). A run_deferred()which starts after the grace period began can detach the request rightbefore the callback looks and then read the freed DSQ's id.\nCancel the pending requests before the grace period instead. The irq workthat frees the DSQ unlinks every CPU's request under the per-CPU deferredlist lock, and schedule_dsq_reenq() ignores a new request under the samelock once the id is invalid. Only a run_deferred() that started before thegrace period can hold a request, and it runs with IRQs disabled, so thegrace period waits for it and nothing touches the DSQ after the callback.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99144https://git.kernel.org/stable/c/633f586329bfd9843bf8acf86c95353f4c16e22dhttps://git.kernel.org/stable/c/069403dff337feb192bfc70fb28ddc8a171e20c1#kernel #Linux#CVE_2026_99144#bot", "url": "https://infosec.exchange/users/cve/statuses/117518238314398104"}, {"timestamp": "2026-10-28T11:17:00Z", "date_only": false, "value": "2026-10-28T11:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99144", "record": "UBUNTU-CVE-2026-99144", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:17:34Z", "date_only": false, "value": "2026-10-28T11:17:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQG8-58GQ-6W7M", "record": "GHSA-MQG8-58GQ-6W7M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:34.433Z", "date_only": false, "value": "2026-10-28T11:17:34.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99144", "record": "FKIE_CVE-2026-99144", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:17:34.433Z", "date_only": false, "value": "2026-10-28T11:17:34.433", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99144", "record": "FKIE_CVE-2026-99144", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-28T12:31:05Z", "date_only": false, "value": "2026-10-28T12:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQG8-58GQ-6W7M", "record": "GHSA-MQG8-58GQ-6W7M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:05Z", "date_only": false, "value": "2026-10-28T12:31:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQG8-58GQ-6W7M", "record": "GHSA-MQG8-58GQ-6W7M", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "vulnerabilities.43.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T06:08:46.317Z", "date_only": false, "value": "2026-10-30T06:08:46.317334Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99144", "record": "BELL-CVE-2026-99144", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:35:38.440Z", "date_only": false, "value": "2026-10-30T06:35:38.440351Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99144", "record": "BELL-CVE-2026-99144", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T06:35:38.440Z", "date_only": false, "value": "2026-10-30T06:35:38.440351Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99144", "record": "BELL-CVE-2026-99144", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T10:57:22.871Z", "date_only": false, "value": "2026-11-06T10:57:22.871+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-06T17:26:21Z", "date_only": false, "value": "2026-11-06T17:26:21Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99144", "record": "UBUNTU-CVE-2026-99144", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T08:08:11.682Z", "anchors": {"origin": {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1200791.080007, "hours": 333.5530777797222, "days": 13.898044907488424, "min_seconds": 1200791.080007, "max_seconds": 1200791.080007, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T10:35:00.602Z", "date_only": false, "value": "2026-10-28T10:35:00.602Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99144", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T08:08:11.682Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}