{"metadata": {"vulnerability": "CVE-2026-99103", "count": 14, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-09-25T10:25:14.391Z", "date_only": false, "value": "2026-09-25T10:25:14.391Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99103", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99103", "record": "UBUNTU-CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:34:22.945Z", "date_only": false, "value": "2026-10-28T10:34:22.945Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99103", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T10:45:54.723Z", "date_only": false, "value": "2026-10-28T10:45:54.723022Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518129840830462", "record": "CVE-2026-99103", "field": "creation_timestamp", "uuid": "ab8d1aba-3634-4a3f-90d5-f22e3714afef", "content": "CVE-2026-99103 workqueue: Fix unbound pool lifetime for pending pwqs In the Linux kernel, the following vulnerability has been resolved:\nworkqueue: Fix unbound pool lifetime for pending pwqs\nKASAN reports a use-after-free of an unbound worker_pool innode_activate_pending_pwq():\n  BUG: KASAN: slab-use-after-free in _raw_spin_trylock+0x6d/0x120  Read of size 4 at addr ffff8880089ce000 by task kworker/u22:0/318\n  CPU: 1 UID: 0 PID: 318 Comm: kworker/u22:0 Not tainted 7.2.0 #1 PREEMPT(lazy)  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014  Workqueue:  0x0 (flush-8:0)  Call Trace:   <TASK>   dump_stack_lvl+0x53/0x70   print_report+0xce/0x610   kasan_report+0xce/0x100   _raw_spin_trylock+0x6d/0x120   pwq_dec_nr_in_flight+0x4b4/0xcb0   process_one_work+0x921/0x11a0   worker_thread+0x4d0/0xd20   kthread+0x2de/0x3c0   ret_from_fork+0x3aa/0x620   ret_from_fork_asm+0x1a/0x30   </TASK>\n  Allocated by task 311:   alloc_pwq+0x439/0xca0   apply_wqattrs_prepare+0x75e/0xd10   apply_workqueue_attrs_locked+0x44/0xa0   wq_nice_store+0x350/0x450\n  Freed by task 0:   kfree+0x127/0x3b0   rcu_core+0x523/0x1780   handle_softirqs+0x1b3/0x610\n  Last potentially related work creation:   put_unbound_pool+0x3f3/0x7d0   pwq_release_workfn+0x494/0x8e0   kthread_worker_fn+0x1ff/0x790\nCanceling the last inactive work skips pwq_dec_nr_active(), so an emptypwq can remain on pending_pwqs when its refcnt reaches zero.pwq_release_workfn() currently puts the pool before removing that pwq.If this drops the last pool reference, the pool can be RCU-freed whilethe pwq remains reachable, and node_activate_pending_pwq() may trylockthe freed pool->lock.\nRemove the pwq from pending_pwqs before putting the pool.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99103https://git.kernel.org/stable/c/6741dd3fd38e47c08bc39d11ef5fa141fa6d0441https://git.kernel.org/stable/c/9f5d5aef3072a33c6f9bfb954bb0cba1c2541849https://git.kernel.org/stable/c/f320b85c90fe5fc9d4d06badd450518323a94a7fhttps://git.kernel.org/stable/c/3d2ef2b9f4c084ab498494d26495a82f7e15407bhttps://git.kernel.org/stable/c/cf9c8aaea0d47410df8708bec195889f3a85cd3c#kernel #Linux#CVE_2026_99103#bot", "url": "https://infosec.exchange/users/cve/statuses/117518129840830462"}, {"timestamp": "2026-10-28T11:17:29Z", "date_only": false, "value": "2026-10-28T11:17:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QWJV-757X-9F99", "record": "GHSA-QWJV-757X-9F99", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:29.593Z", "date_only": false, "value": "2026-10-28T11:17:29.593", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99103", "record": "FKIE_CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:01Z", "date_only": false, "value": "2026-10-28T12:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QWJV-757X-9F99", "record": "GHSA-QWJV-757X-9F99", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:06:42.379Z", "date_only": false, "value": "2026-10-30T06:06:42.379388Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99103", "record": "BELL-CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:30:30Z", "date_only": false, "value": "2026-10-30T06:30:30Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99103", "record": "UBUNTU-CVE-2026-99103", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T12:41:45.076Z", "date_only": false, "value": "2026-10-30T12:41:45.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99103", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:41:45.076Z", "date_only": false, "value": "2026-10-30T12:41:45.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99103", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:45.183Z", "date_only": false, "value": "2026-10-30T13:21:45.183", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99103", "record": "FKIE_CVE-2026-99103", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:20Z", "date_only": false, "value": "2026-10-30T15:34:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QWJV-757X-9F99", "record": "GHSA-QWJV-757X-9F99", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T06:24:01.459Z", "date_only": false, "value": "2026-11-03T06:24:01.459521Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99103", "record": "BELL-CVE-2026-99103", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T17:40:54.512Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99103", "record": "UBUNTU-CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99103", "record": "UBUNTU-CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 668454.512488, "hours": 185.68180902444445, "days": 7.736742042685185, "min_seconds": 582054.512488, "max_seconds": 668454.512488, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99103", "record": "UBUNTU-CVE-2026-99103", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T17:40:54.512Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}