{"metadata": {"vulnerability": "CVE-2026-99181", "count": 20, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-25T10:25:14.399Z", "date_only": false, "value": "2026-09-25T10:25:14.399Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99181", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99181", "record": "UBUNTU-CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:35:34.443Z", "date_only": false, "value": "2026-10-28T10:35:34.443Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99181", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T11:17:38Z", "date_only": false, "value": "2026-10-28T11:17:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q48X-CFGC-JF7C", "record": "GHSA-Q48X-CFGC-JF7C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:38.883Z", "date_only": false, "value": "2026-10-28T11:17:38.883", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99181", "record": "FKIE_CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:38:25.024Z", "date_only": false, "value": "2026-10-28T11:38:25.024499Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518336293862540", "record": "CVE-2026-99181", "field": "creation_timestamp", "uuid": "2d572f5a-d4d4-4562-b50c-279ea5e98067", "content": "CVE-2026-99181 autofs: ignore notification errors from a replaced pipe In the Linux kernel, the following vulnerability has been resolved:\nautofs: ignore notification errors from a replaced pipe\nautofs_notify_daemon() takes a reference to the current notificationpipe under wq_mutex, then drops the mutex before writing the request. Thewrite can block while the daemon enters catatonic mode and installs areplacement pipe.\nIf the old pipe's reader is then closed, the delayed write returns -EPIPEand the generic error path enters catatonic mode again. That transitionacts on the current superblock state, closes the replacement pipe, andreleases the new daemon generation's wait queues.\nOnly enter catatonic mode when the pipe which failed is still the currentpipe. Factor the already-locked transition so the identity check and statechange are atomic with respect to another replacement.\nThis was reproduced on v7.3-rc5-337-gff47652a4b66c in a local QEMU guest.An unprivileged UID 65534 lookup filled the old packet pipe before anormal CATATONIC/SETPIPEFD restart. On the unmodified kernel, the new pipereceived HUP and both a pending victim lookup and a later lookup failedwith ENOENT in two out of two fresh-mount runs.\nWith this change, the new pipe remained active, received an intact304-byte request, and both victim lookups completed in two out of tworuns. Normal lookup and restart-without-a-blocked-writer controls passed.No KASAN, oops, refcount, or lock diagnostic was observed. A sourcereproducer and complete local logs are available privately on request.\nThe demonstrated impact is limited to denial of a shared autofs serviceduring a legitimate daemon restart. No memory corruption, information leak,privilege escalation, or code execution primitive was observed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99181https://git.kernel.org/stable/c/1a177064f501ed4b67873a43aae5d5bdb18b3704https://git.kernel.org/stable/c/fb296391f685d82dbb93621a970fb234cea45280https://git.kernel.org/stable/c/65676cd4203c0e41a94caf54080a7f0a95434bda#kernel #Linux#CVE_2026_99181#bot", "url": "https://infosec.exchange/users/cve/statuses/117518336293862540"}, {"timestamp": "2026-10-28T12:31:07Z", "date_only": false, "value": "2026-10-28T12:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q48X-CFGC-JF7C", "record": "GHSA-Q48X-CFGC-JF7C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T01:07:51Z", "date_only": false, "value": "2026-10-29T01:07:51.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:07:51Z", "date_only": false, "value": "2026-10-29T01:07:51.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:07:51Z", "date_only": false, "value": "2026-10-29T01:07:51.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:08:47.800Z", "date_only": false, "value": "2026-10-30T06:08:47.800076Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99181", "record": "BELL-CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:42:44.732Z", "date_only": false, "value": "2026-10-30T12:42:44.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99181", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:42:44.732Z", "date_only": false, "value": "2026-10-30T12:42:44.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99181", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:51.783Z", "date_only": false, "value": "2026-10-30T13:21:51.783", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99181", "record": "FKIE_CVE-2026-99181", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:24Z", "date_only": false, "value": "2026-10-30T15:34:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q48X-CFGC-JF7C", "record": "GHSA-Q48X-CFGC-JF7C", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:04:03Z", "date_only": false, "value": "2026-10-30T19:04:03Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99181", "record": "UBUNTU-CVE-2026-99181", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T14:52:13Z", "date_only": false, "value": "2026-11-01T14:52:13.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:52:13Z", "date_only": false, "value": "2026-11-01T14:52:13.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.152Z", "date_only": false, "value": "2026-11-02T08:02:48.152Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99181", "record": "MSRC_CVE-2026-99181", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T20:04:14.942Z", "date_only": false, "value": "2026-11-03T20:04:14.942843Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99181", "record": "BELL-CVE-2026-99181", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T03:17:34.915Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99181", "record": "UBUNTU-CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99181", "record": "UBUNTU-CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 703054.915309, "hours": 195.29303203027777, "days": 8.13720966792824, "min_seconds": 616654.915309, "max_seconds": 703054.915309, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99181", "record": "UBUNTU-CVE-2026-99181", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-05T03:17:34.915Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}