{"metadata": {"vulnerability": "CVE-2026-99247", "count": 22, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-25T10:25:14.403Z", "date_only": false, "value": "2026-09-25T10:25:14.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99247", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T11:24:04.517Z", "date_only": false, "value": "2026-11-03T11:24:04.517356Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117552253760489176", "record": "CVE-2026-99247", "field": "creation_timestamp", "uuid": "c4a44541-2299-4770-b886-0306c25e2f83", "content": "CVE-2026-99247 tracing: Do not initialize tracefs work if tracing is disabled In the Linux kernel, the following vulnerability has been resolved:\ntracing: Do not initialize tracefs work if tracing is disabled\nIf trace buffer allocation fails during early boot (e.g.  inearly_trace_init() -> allocate_trace_buffers()), tracing_disabled isleft set to 1 and the global trace array events list remainsuninitialized.\nLater during boot, tracer_init_tracefs() (invoked via fs_initcall)queues tracerfs_init_work asynchronously without checking if tracing wasdisabled.  When tracer_init_tracefs_work_func() runs, it callsevent_trace_init() and init_tracer_tracefs(&global_trace, NULL)unconditionally.  This leads to __find_event_file() dereferencing anuninitialized tr->events list, causing an early boot NULL pointerdereference Oops:\n  BUG: Kernel NULL pointer dereference on read at 0x00000010  Faulting instruction address: 0xc000000000485be0  Oops: Kernel access of bad area, sig: 7 [#1]  ...  NIP [c000000000485be0] __find_event_file+0x70/0x3c0  LR  [c000000000448874] init_tracer_tracefs+0x274/0xc80  Call Trace:   init_tracer_tracefs+0x274/0xc80   tracer_init_tracefs_work_func+0x50/0x320   process_one_work+0x1e8/0x5c0   worker_thread+0x1dc/0x3d0   kthread+0x194/0x1b0   start_kernel_thread+0x14/0x18\nCheck tracing_disabled at the beginning of tracer_init_tracefs_work_func()and return immediately if tracing is disabled or failed to initialize,preventing the crash.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99247https://git.kernel.org/stable/c/e8665e884e076d894f3eed8b9ea28e37a6448604https://git.kernel.org/stable/c/e8cfcd7e60eaa3b0dea4d71c64499604e7081736https://git.kernel.org/stable/c/afd38b10b1c6a5c5d6952b15b990596dab9684e6https://git.kernel.org/stable/c/813e18881c6472eb229a63180ff42c808e3e949bhttps://git.kernel.org/stable/c/7539c61f522ff693d9565a0411386c2236e776cdhttps://git.kernel.org/stable/c/b3b974008388ab59e44d764ba7a63c988fec2524#kernel #Linux#CVE_2026_99247#bot", "url": "https://infosec.exchange/users/cve/statuses/117552253760489176"}, {"timestamp": "2026-11-03T12:00:39.318Z", "date_only": false, "value": "2026-11-03T12:00:39.318157Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117552397581275041", "record": "cve-2026-99247", "field": "creation_timestamp", "uuid": "7a29f189-040e-4f81-87bc-4a68f3b3bcba", "content": "CVE-2026-99247 | HIGH severity in Linux kernel 5.19: Kernel may crash (NULL pointer dereference) during early boot if tracing is disabled & trace buffer allocation fails. Patch available \u2014 apply ASAP to prevent boot failures. https://radar.offseq.com/threat/cve-2026-99247-tracing-do-not-initialize-tracefs-work-if-tracing-is-disabled-in-linux-kernel-11ff73f18055537a #OffSeq #Linux #Kernel #Vuln", "url": "https://infosec.exchange/users/offseq/statuses/117552397581275041"}, {"timestamp": "2026-11-03T12:00:41.401Z", "date_only": false, "value": "2026-11-03T12:00:41.401177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mzfs3hr4tx2x", "record": "cve-2026-99247", "field": "creation_timestamp", "uuid": "71815194-78fd-412e-9f9a-943e13d9aa31", "content": "Linux 5.19 faces a HIGH severity issue (CVE-2026-99247): tracing subsystem flaw may cause boot-time kernel crashes if tracing is disabled and buffer allocation fails. Patch systems to prevent outages. https://radar.offseq.com/threat/cve-2026-99247-tracing-do-not-initialize-tracefs-work-if-tracing...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mzfs3hr4tx2x"}, {"timestamp": "2026-11-03T12:17:00Z", "date_only": false, "value": "2026-11-03T12:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99247", "record": "UBUNTU-CVE-2026-99247", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31Z", "date_only": false, "value": "2026-11-03T12:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-92RV-C2P9-QP48", "record": "GHSA-92RV-C2P9-QP48", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31.190Z", "date_only": false, "value": "2026-11-03T12:17:31.190", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99247", "record": "FKIE_CVE-2026-99247", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31.190Z", "date_only": false, "value": "2026-11-03T12:17:31.190", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99247", "record": "FKIE_CVE-2026-99247", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T12:31:49Z", "date_only": false, "value": "2026-11-03T12:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-92RV-C2P9-QP48", "record": "GHSA-92RV-C2P9-QP48", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:31:49Z", "date_only": false, "value": "2026-11-03T12:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-92RV-C2P9-QP48", "record": "GHSA-92RV-C2P9-QP48", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-04T01:03:11Z", "date_only": false, "value": "2026-11-04T01:03:11.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-04T01:03:11Z", "date_only": false, "value": "2026-11-04T01:03:11.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-11-04T01:03:11Z", "date_only": false, "value": "2026-11-04T01:03:11.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T14:46:21Z", "date_only": false, "value": "2026-11-04T14:46:21.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-04T14:46:21Z", "date_only": false, "value": "2026-11-04T14:46:21.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T06:08:03.215Z", "date_only": false, "value": "2026-11-05T06:08:03.215649Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99247", "record": "BELL-CVE-2026-99247", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T06:30:22.314Z", "date_only": false, "value": "2026-11-05T06:30:22.314289Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99247", "record": "BELL-CVE-2026-99247", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T08:00:26.621Z", "date_only": false, "value": "2026-11-05T08:00:26.621Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99247", "record": "MSRC_CVE-2026-99247", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-06T17:26:39Z", "date_only": false, "value": "2026-11-06T17:26:39Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99247", "record": "UBUNTU-CVE-2026-99247", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T04:40:40.315Z", "anchors": {"origin": {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 321734.152064, "hours": 89.37059779555557, "days": 3.7237749081481484, "min_seconds": 321734.152064, "max_seconds": 321734.152064, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T11:18:26.163Z", "date_only": false, "value": "2026-11-03T11:18:26.163Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99247", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T04:40:40.315Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}