{"metadata": {"vulnerability": "CVE-2026-99248", "count": 15, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-25T10:25:14.403Z", "date_only": false, "value": "2026-09-25T10:25:14.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99248", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T11:24:44.792Z", "date_only": false, "value": "2026-11-03T11:24:44.792840Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117552256403093642", "record": "CVE-2026-99248", "field": "creation_timestamp", "uuid": "31add27c-3c76-4be1-a405-970cae2d471a", "content": "CVE-2026-99248 i2c: xiic: restore non-managed runtime PM to fix clk WARN flood In the Linux kernel, the following vulnerability has been resolved:\ni2c: xiic: restore non-managed runtime PM to fix clk WARN flood\nThe devres conversion replaced manual pm_runtime_enable()/disable() withdevm_pm_runtime_set_active_enabled() and dropped the remove-time runtimePM teardown. The managed release tears runtime PM down in the wrongorder: it calls pm_runtime_dont_use_autosuspend() beforepm_runtime_disable(), i.e. while runtime PM is still enabled, and devresis LIFO so the devm_clk_get_enabled() release runs afterwards.\nAt remove(), pm_runtime_put_sync() leaves the device active with theautosuspend timer armed. Clearing use_autosuspend then makes rpm_idle()suspend immediately, and xiic_i2c_runtime_suspend() clk_disable()s theclock. The later devm_clk_get_enabled() release clk_disable_unprepare()sthe already-disabled clock, so clk_core_disable() WARNs (\"clkN alreadydisabled\") on every teardown.\nDrop the managed helper and restore the non-managed runtime PM setup andteardown, so runtime PM is enabled once in probe and disabled once inremove and the clock enable count stays balanced.\nOrder the remove teardown so runtime PM is disabled before the usagecount is dropped: pm_runtime_disable() followed by pm_runtime_put_noidle()instead of pm_runtime_put_sync(). Dropping the count first with autosuspendstill enabled arms the autosuspend timer, and a preemption beforepm_runtime_disable() lets it expire, suspend the device and clk_disable()the clock, which the devm release then disables again - the same WARN.\nRestore the non-managed IRQ request as well. The probe error paths nowunwind runtime PM by hand via goto, and a devm-registered handler is onlyfreed later during devres unwind, so it would stay live across the manualteardown (and across any future failing step added after it). Request theIRQ with request_threaded_irq() and free it explicitly in the probe errorpath and in remove. The probe error path also clears use_autosuspend, tomatch the teardown in remove().\nhttps://www.cve.org/CVERecord?id=CVE-2026-99248https://git.kernel.org/stable/c/47e105bdc863f2b320f9c05c80a63d3b83312700https://git.kernel.org/stable/c/d33373c565af9c8a28776af02bd20ba6e5724211#kernel #Linux#CVE_2026_99248#bot", "url": "https://infosec.exchange/users/cve/statuses/117552256403093642"}, {"timestamp": "2026-11-03T12:17:00Z", "date_only": false, "value": "2026-11-03T12:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99248", "record": "UBUNTU-CVE-2026-99248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31Z", "date_only": false, "value": "2026-11-03T12:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8JV9-R9Q8-JX4Q", "record": "GHSA-8JV9-R9Q8-JX4Q", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31.333Z", "date_only": false, "value": "2026-11-03T12:17:31.333", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99248", "record": "FKIE_CVE-2026-99248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:31.333Z", "date_only": false, "value": "2026-11-03T12:17:31.333", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99248", "record": "FKIE_CVE-2026-99248", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T12:31:49Z", "date_only": false, "value": "2026-11-03T12:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8JV9-R9Q8-JX4Q", "record": "GHSA-8JV9-R9Q8-JX4Q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:31:49Z", "date_only": false, "value": "2026-11-03T12:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8JV9-R9Q8-JX4Q", "record": "GHSA-8JV9-R9Q8-JX4Q", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T04:42:28Z", "date_only": false, "value": "2026-11-05T04:42:28Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99248", "record": "UBUNTU-CVE-2026-99248", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T06:08:03.276Z", "date_only": false, "value": "2026-11-05T06:08:03.276837Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99248", "record": "BELL-CVE-2026-99248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T06:30:22.382Z", "date_only": false, "value": "2026-11-05T06:30:22.382466Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99248", "record": "BELL-CVE-2026-99248", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T06:30:22.382Z", "date_only": false, "value": "2026-11-05T06:30:22.382466Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99248", "record": "BELL-CVE-2026-99248", "field": "withdrawn", "linked_record": true}], "metrics": {"as_of": "2026-11-05T23:18:17.414Z", "anchors": {"origin": {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 215990.936328, "hours": 59.997482313333336, "days": 2.499895096388889, "min_seconds": 215990.936328, "max_seconds": 215990.936328, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T11:18:26.478Z", "date_only": false, "value": "2026-11-03T11:18:26.478Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99248", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T23:18:17.414Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}