{"metadata": {"vulnerability": "CVE-2026-99246", "count": 31, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 22}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.403Z", "date_only": false, "value": "2026-09-25T10:25:14.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99246", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "vulnerabilities.29.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T11:18:25.838Z", "date_only": false, "value": "2026-11-03T11:18:25.838Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T11:23:24.247Z", "date_only": false, "value": "2026-11-03T11:23:24.247650Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117552251117149232", "record": "CVE-2026-99246", "field": "creation_timestamp", "uuid": "ffad003e-40ce-4abf-a1f4-48fedbf8405b", "content": "CVE-2026-99246 tipc: protect node reset trace dump with node lock In the Linux kernel, the following vulnerability has been resolved:\ntipc: protect node reset trace dump with node lock\nThe tipc_node_reset_links trace event asks tipc_node_dump() to walk thenode's link entries. Unlike the other node events that request link data,this event runs without the node lock.\nThis permits bearer teardown to free a link while the trace callback isdumping it:\n  CPU 0                                CPU 1  trace_tipc_node_reset_links()    tipc_node_dump()      l = n->links[0].link                                       tipc_node_write_lock()                                       kfree(l)                                       n->links[0].link = NULL                                       tipc_node_write_unlock()      tipc_link_dump(l)\ntipc_link_dump() then dereferences the stale pointer. KASAN reported:\n  BUG: KASAN: slab-use-after-free in tipc_link_dump  Read of size 4 by task poc/115  Call Trace:   tipc_link_dump+0x10cb/0x16b0   tipc_node_dump+0x4bb/0x740   trace_event_raw_event_tipc_node_class+0x258/0x360   tipc_node_reset_links+0x14d/0x1a0   tipc_rcv+0x13f5/0x3030   tipc_udp_recv+0x4e3/0x670  Allocated by task 0:   tipc_link_create+0x1e1/0x1020   tipc_node_check_dest+0x7d2/0x11a0   tipc_disc_rcv+0xdbf/0x1430  Freed by task 89:   kfree+0x131/0x3c0   tipc_node_link_down+0x267/0x4b0   tipc_node_delete_links+0xec/0x160   bearer_disable+0x107/0x260\nTake the node write lock around the trace event. This serializes thedump against tipc_node_link_down(delete=true), which frees the linkunder the same write lock.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99246https://git.kernel.org/stable/c/c8b72ca0918e95f708f67c8b3e69b05290f2b6d2https://git.kernel.org/stable/c/6e492cb98ca69cc1145175e23e22e3b84da7f26dhttps://git.kernel.org/stable/c/7bb6a35bd6d69019539d8782fb590fd2aa8a3236https://git.kernel.org/stable/c/6abd93d01b0f495f29201925a5ee8e6a583c4044https://git.kernel.org/stable/c/a6101d62ccfa153db8c218ce59362b8e0316fd4fhttps://git.kernel.org/stable/c/b8b7d28dc2b7472ffd1eff3954c38f1976b21a7bhttps://git.kernel.org/stable/c/fa8c78c0e49aa11fae116fd841e41aa8f2d68751https://git.kernel.org/stable/c/dddf197f29ba5e47a476dde82bf542ca2e0d5e5e#kernel #Linux#CVE_2026_99246#bot", "url": "https://infosec.exchange/users/cve/statuses/117552251117149232"}, {"timestamp": "2026-11-03T12:17:00Z", "date_only": false, "value": "2026-11-03T12:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99246", "record": "UBUNTU-CVE-2026-99246", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31Z", "date_only": false, "value": "2026-11-03T12:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QWFH-HPCH-PH73", "record": "GHSA-QWFH-HPCH-PH73", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31.030Z", "date_only": false, "value": "2026-11-03T12:17:31.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99246", "record": "FKIE_CVE-2026-99246", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:31:49Z", "date_only": false, "value": "2026-11-03T12:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QWFH-HPCH-PH73", "record": "GHSA-QWFH-HPCH-PH73", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T19:14:37.365Z", "date_only": false, "value": "2026-11-03T19:14:37.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99246", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T19:14:37.365Z", "date_only": false, "value": "2026-11-03T19:14:37.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99246", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T20:18:31.013Z", "date_only": false, "value": "2026-11-03T20:18:31.013", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99246", "record": "FKIE_CVE-2026-99246", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T21:32:06Z", "date_only": false, "value": "2026-11-03T21:32:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QWFH-HPCH-PH73", "record": "GHSA-QWFH-HPCH-PH73", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T14:46:17Z", "date_only": false, "value": "2026-11-04T14:46:17.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-05T06:08:03.154Z", "date_only": false, "value": "2026-11-05T06:08:03.154534Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99246", "record": "BELL-CVE-2026-99246", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T14:54:00Z", "date_only": false, "value": "2026-11-05T14:54:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T01:45:24Z", "date_only": false, "value": "2026-11-07T01:45:24.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-10T20:02:29.645Z", "date_only": false, "value": "2026-11-10T20:02:29.645694Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99246", "record": "BELL-CVE-2026-99246", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-12T17:55:29Z", "date_only": false, "value": "2026-11-12T17:55:29.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-12T17:55:29Z", "date_only": false, "value": "2026-11-12T17:55:29.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-12T23:00:00Z", "date_only": false, "value": "2026-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-12T23:00:00Z", "date_only": false, "value": "2026-11-12T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-13T03:24:56Z", "date_only": false, "value": "2026-11-13T03:24:56Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99246", "record": "UBUNTU-CVE-2026-99246", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-13T08:00:39.967Z", "date_only": false, "value": "2026-11-13T08:00:39.967Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-13T13:09:29.816Z", "date_only": false, "value": "2026-11-13T13:09:29.816+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-14T22:58:17.320Z", "anchors": {"origin": {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 93788.0, "hours": 26.052222222222223, "days": 1.0855092592592592, "min_seconds": 93788.0, "max_seconds": 93788.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 93788.0, "hours": 26.052222222222223, "days": 1.0855092592592592, "min_seconds": 93788.0, "max_seconds": 93788.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4302", "record": "WID-SEC-W-2026-4302", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T01:03:08Z", "date_only": false, "value": "2026-11-04T01:03:08.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99246", "record": "MSRC_CVE-2026-99246", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}