{"metadata": {"vulnerability": "CVE-2026-99203", "count": 16, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-25T10:25:14.400Z", "date_only": false, "value": "2026-09-25T10:25:14.400Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99203", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99203", "record": "UBUNTU-CVE-2026-99203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99203", "record": "UBUNTU-CVE-2026-99203", "field": "modified"}, {"timestamp": "2026-10-28T10:35:57.589Z", "date_only": false, "value": "2026-10-28T10:35:57.589Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99203", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T10:35:57.589Z", "date_only": false, "value": "2026-10-28T10:35:57.589Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99203", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T10:35:57.589Z", "date_only": false, "value": "2026-10-28T10:35:57.589Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99203", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T11:17:41Z", "date_only": false, "value": "2026-10-28T11:17:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J875-7X9H-G92W", "record": "GHSA-J875-7X9H-G92W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-28T11:53:13.278Z", "date_only": false, "value": "2026-10-28T11:53:13.278778Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518394511978227", "record": "CVE-2026-99203", "field": "creation_timestamp", "uuid": "868a2fd9-9a12-4d1b-85ef-3a7d572b898d", "content": "CVE-2026-99203 pipe: preserve existing fasync readers on writer setup failure In the Linux kernel, the following vulnerability has been resolved:\npipe: preserve existing fasync readers on writer setup failure\nF_SETFL and FIOASYNC decide whether to invoke ->fasync() beforepipe_fasync() takes pipe->mutex. Two enables of one O_RDWR FIFO cantherefore both enter the callback.\nfasync_helper() allocates before checking for an existing entry. If thefirst enable installs both entries, a second enable can update thereader entry and then fail the allocation for the writer entry. Theerror path removes the pre-existing reader entry, clearing FASYNC whilethe writer entry remains registered. __fput() then skips ->fasync(), so alater pipe notification can dereference the freed file or its f_owner.An unprivileged memory-pressure reproducer triggers a KASANslab-use-after-free in send_sigio() through this path.\nKeep the reader helper's result and undo the registration only if thiscall added it. The pipe mutex serializes changes to both lists, so afailed new registration still removes its reader, while a failedduplicate preserves the existing registrations and FASYNC. Successfulduplicate enables continue to update fa_fd as before.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99203https://git.kernel.org/stable/c/4c42ce499ce4b1c787e61082e3b13df4f30c4eaahttps://git.kernel.org/stable/c/2259809e5b7043c4ba20af7b14ba3e471cf55521https://git.kernel.org/stable/c/40bb03d3ea6f6a915218508819ecc4d7a7fa260d#kernel #Linux#CVE_2026_99203#bot", "url": "https://infosec.exchange/users/cve/statuses/117518394511978227"}, {"timestamp": "2026-10-28T12:31:08Z", "date_only": false, "value": "2026-10-28T12:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J875-7X9H-G92W", "record": "GHSA-J875-7X9H-G92W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T12:31:08Z", "date_only": false, "value": "2026-10-28T12:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J875-7X9H-G92W", "record": "GHSA-J875-7X9H-G92W", "field": "modified"}, {"timestamp": "2026-10-29T01:08:28Z", "date_only": false, "value": "2026-10-29T01:08:28.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99203", "record": "MSRC_CVE-2026-99203", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-29T01:08:28Z", "date_only": false, "value": "2026-10-29T01:08:28.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99203", "record": "MSRC_CVE-2026-99203", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-29T01:08:28Z", "date_only": false, "value": "2026-10-29T01:08:28.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99203", "record": "MSRC_CVE-2026-99203", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T01:08:28Z", "date_only": false, "value": "2026-10-29T01:08:28.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99203", "record": "MSRC_CVE-2026-99203", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-29T05:26:09.536Z", "date_only": false, "value": "2026-10-29T05:26:09.536271Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117522534827491229", "record": "CVE-2026-99203", "field": "creation_timestamp", "uuid": "bd684fee-c2eb-446c-ab4d-ce6601fd9287", "content": "\u26a0\ufe0f We have just added an important vulnerability affecting Linux Kernel (CVE-2026-99203) https://vuldb.com/vuln/427950", "url": "https://infosec.exchange/users/vuldb/statuses/117522534827491229"}, {"timestamp": "2026-10-29T07:00:29.385Z", "date_only": false, "value": "2026-10-29T07:00:29.385Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99203", "record": "MSRC_CVE-2026-99203", "field": "document.tracking.generator.date"}], "metrics": {"as_of": "2026-10-29T16:41:30.957Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99203", "record": "UBUNTU-CVE-2026-99203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99203", "record": "UBUNTU-CVE-2026-99203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 146490.957048, "hours": 40.691932513333334, "days": 1.6954971880555556, "min_seconds": 60090.957048, "max_seconds": 146490.957048, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99203", "record": "UBUNTU-CVE-2026-99203", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T16:41:30.957Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}