{"metadata": {"vulnerability": "CVE-2026-99279", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-09-25T10:25:14.405Z", "date_only": false, "value": "2026-09-25T10:25:14.405Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99279", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T14:17:03Z", "date_only": false, "value": "2026-11-07T14:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5C46-592C-382G", "record": "GHSA-5C46-592C-382G", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T14:17:03.317Z", "date_only": false, "value": "2026-11-07T14:17:03.317", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99279", "record": "FKIE_CVE-2026-99279", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T14:17:03.317Z", "date_only": false, "value": "2026-11-07T14:17:03.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99279", "record": "FKIE_CVE-2026-99279", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T14:20:26.410Z", "date_only": false, "value": "2026-11-07T14:20:26.410202Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117575596500677475", "record": "CVE-2026-99279", "field": "creation_timestamp", "uuid": "266b38aa-24a7-4d68-b085-b778202e7459", "content": "CVE-2026-99279 ksmbd: reclaim ended sessions on logoff and expiration In the Linux kernel, the following vulnerability has been resolved:\nksmbd: reclaim ended sessions on logoff and expiration\nLOGOFF and previous-session replacement leave sessions Expired with azero credential expiry. Ended sessions can retain their memory andconnection slots when no further setup arrives on the owning connection.\nUnpublish a logged-off session while the request reference keeps itsresponse signing and encryption keys alive. Remove its procfs entrybefore dropping the table reference so a reader cannot remove its ownentry on the last put. Clear proc_entry after removal to avoid removingit twice.\nReclaim ended sessions from the global table in the existing expirationworker before it acquires conn_list_lock. Only select Expired sessionswith zero credential expiry and no references beyond the tablereference. Keep sessions whose Kerberos credentials expired availablefor reauthentication.\nUnlink the session from its setup connection and all channelconnections, so SMB2 sessions and sessions with only secondary SMB3channels are covered. The session already holds connection references,and sessions_table_lock prevents concurrent channel removal. Queuesessions on a separate disposal list, leaving their hash nodes unhashed,and remove procfs entries and drop table references outside the locks.\nKeep the pending setup check before allocating a new session soabandoned InProgress sessions can release their slots even at theconnection limit. Retain the timeout and reference checks and dispose ofthose sessions outside the locks. Leave ended Expired sessions to theexpiration worker.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99279https://git.kernel.org/stable/c/1767a5e45dbf6a3b12105196dda4fb0ef80b9698https://git.kernel.org/stable/c/26534ef335e92b028eb58e44d98d46a0e26af0ec#kernel #Linux#CVE_2026_99279#bot", "url": "https://infosec.exchange/users/cve/statuses/117575596500677475"}, {"timestamp": "2026-11-07T15:30:28Z", "date_only": false, "value": "2026-11-07T15:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5C46-592C-382G", "record": "GHSA-5C46-592C-382G", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T15:30:29Z", "date_only": false, "value": "2026-11-07T15:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5C46-592C-382G", "record": "GHSA-5C46-592C-382G", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T10:55:09.204Z", "anchors": {"origin": {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 74781.96177, "hours": 20.77276715833333, "days": 0.8655319649305555, "min_seconds": 74781.96177, "max_seconds": 74781.96177, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T14:08:47.243Z", "date_only": false, "value": "2026-11-07T14:08:47.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99279", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T10:55:09.204Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}