{"metadata": {"vulnerability": "CVE-2026-99179", "count": 35, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 24}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.399Z", "date_only": false, "value": "2026-09-25T10:25:14.399Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T10:35:32.734Z", "date_only": false, "value": "2026-10-28T10:35:32.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T11:17:00Z", "date_only": false, "value": "2026-10-28T11:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99179", "record": "UBUNTU-CVE-2026-99179", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:17:38Z", "date_only": false, "value": "2026-10-28T11:17:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6FPX-QF4R-R7V5", "record": "GHSA-6FPX-QF4R-R7V5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:38.633Z", "date_only": false, "value": "2026-10-28T11:17:38.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99179", "record": "FKIE_CVE-2026-99179", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:37:04.025Z", "date_only": false, "value": "2026-10-28T11:37:04.025194Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518330985908264", "record": "CVE-2026-99179", "field": "creation_timestamp", "uuid": "1876cb4c-6bce-401c-8aaf-0ea83d117c27", "content": "CVE-2026-99179 watch_queue: Fix note pool publication race in watch_queue_set_size() In the Linux kernel, the following vulnerability has been resolved:\nwatch_queue: Fix note pool publication race in watch_queue_set_size()\nThere is a race between watch_queue_set_size() and post_one_notification().watch_queue_set_size() publishes wqueue->notes, notes_bitmap, nr_pages andnr_notes with plain stores, and post_one_notification() reads them withplain loads under a different lock, so nothing orders the four storesagainst the poster's loads: depending on the build, notes can be storedlast (gcc 14 on x86-64 does this).  Since keyctl_watch_key() lets a watchattach to a queue before it is sized, post_one_notification() can alreadybe running on another CPU at that moment: it reads nr_notes > 0, passesits bounds check, and then reads notes while it is still NULL,dereferencing notes[0].\nAn unprivileged user triggers this reliably by watching one of its ownkeys through a notification pipe and racing ioctl(IOC_WATCH_QUEUE_SET_SIZE)on that pipe against keyctl(KEYCTL_SETPERM) on the key from another CPU,triggering:\n  BUG: kernel NULL pointer dereference, address: 0000000000000000  RIP: 0010:post_one_notification.isra.0+0xa2/0x1e0  Call Trace:   __post_watch_notification+0x148/0x180   keyctl_setperm_key+0x119/0x130   do_syscall_64+0x108/0x4c0   entry_SYSCALL_64_after_hwframe+0x77/0x7f  Kernel panic - not syncing: Fatal exception in interrupt\nFix this by publishing nr_notes last with smp_store_release(), and byreading it once with smp_load_acquire() in post_one_notification() beforethe bitmap and the page array are touched.  A poster that observes anon-zero nr_notes then also observes the pool behind it; one that observeszero drops the notification as before.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99179https://git.kernel.org/stable/c/811fb6d0b07605e8e8d93bde8748be4b3028809ahttps://git.kernel.org/stable/c/9e73a6754457ffed8399b835552013b9363e51d1https://git.kernel.org/stable/c/5e531d62f1f8834faf7a4eed0d41105cf6570a8f#kernel #Linux#CVE_2026_99179#bot", "url": "https://infosec.exchange/users/cve/statuses/117518330985908264"}, {"timestamp": "2026-10-28T12:31:07Z", "date_only": false, "value": "2026-10-28T12:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6FPX-QF4R-R7V5", "record": "GHSA-6FPX-QF4R-R7V5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T23:00:00Z", "date_only": false, "value": "2026-10-28T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "vulnerabilities.78.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:06:44.428Z", "date_only": false, "value": "2026-10-30T06:06:44.428117Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99179", "record": "BELL-CVE-2026-99179", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:42:42.438Z", "date_only": false, "value": "2026-10-30T12:42:42.438Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:42:42.438Z", "date_only": false, "value": "2026-10-30T12:42:42.438Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99179", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:51.507Z", "date_only": false, "value": "2026-10-30T13:21:51.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99179", "record": "FKIE_CVE-2026-99179", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:24Z", "date_only": false, "value": "2026-10-30T15:34:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6FPX-QF4R-R7V5", "record": "GHSA-6FPX-QF4R-R7V5", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T14:52:04Z", "date_only": false, "value": "2026-11-01T14:52:04.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1473", "record": "CERTFR-2026-AVI-1473", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-05T14:46:36Z", "date_only": false, "value": "2026-11-05T14:46:36.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-05T14:46:36Z", "date_only": false, "value": "2026-11-05T14:46:36.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1473", "record": "CERTFR-2026-AVI-1473", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1473", "record": "CERTFR-2026-AVI-1473", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1473", "record": "CERTFR-2026-AVI-1473", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-06T08:02:51.309Z", "date_only": false, "value": "2026-11-06T08:02:51.309Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-10T20:02:25.943Z", "date_only": false, "value": "2026-11-10T20:02:25.943546Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99179", "record": "BELL-CVE-2026-99179", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-11T01:36:25Z", "date_only": false, "value": "2026-11-11T01:36:25Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99179", "record": "UBUNTU-CVE-2026-99179", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-12T09:19:43.431Z", "date_only": false, "value": "2026-11-12T09:19:43.431+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4224", "record": "WID-SEC-W-2026-4224", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-12T09:52:48.033Z", "anchors": {"origin": {"timestamp": "2026-10-28T10:35:32.734Z", "date_only": false, "value": "2026-10-28T10:35:32.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T10:35:32.734Z", "date_only": false, "value": "2026-10-28T10:35:32.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 52328.266, "hours": 14.535629444444446, "days": 0.6056512268518519, "min_seconds": 52328.266, "max_seconds": 52328.266, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T10:35:32.734Z", "date_only": false, "value": "2026-10-28T10:35:32.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 52328.266, "hours": 14.535629444444446, "days": 0.6056512268518519, "min_seconds": 52328.266, "max_seconds": 52328.266, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T10:35:32.734Z", "date_only": false, "value": "2026-10-28T10:35:32.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99179", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T01:07:41Z", "date_only": false, "value": "2026-10-29T01:07:41.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99179", "record": "MSRC_CVE-2026-99179", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}