{"metadata": {"vulnerability": "CVE-2026-99202", "count": 14, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-09-25T10:25:14.400Z", "date_only": false, "value": "2026-09-25T10:25:14.400Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T10:35:56.827Z", "date_only": false, "value": "2026-10-28T10:35:56.827Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T11:17:00Z", "date_only": false, "value": "2026-10-28T11:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99202", "record": "UBUNTU-CVE-2026-99202", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:17:41Z", "date_only": false, "value": "2026-10-28T11:17:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PC8P-2J27-G7RJ", "record": "GHSA-PC8P-2J27-G7RJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:41.377Z", "date_only": false, "value": "2026-10-28T11:17:41.377", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99202", "record": "FKIE_CVE-2026-99202", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:52:33.005Z", "date_only": false, "value": "2026-10-28T11:52:33.005854Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518391868627545", "record": "CVE-2026-99202", "field": "creation_timestamp", "uuid": "9c04db0f-605e-4997-9721-410c93e44ba4", "content": "CVE-2026-99202 scsi: libsas: Fix SMP IO deadlock during HA resume In the Linux kernel, the following vulnerability has been resolved:\nscsi: libsas: Fix SMP IO deadlock during HA resume\nsmp_execute_task_sg() calls pm_runtime_get_sync() on the host beforeissuing an SMP command. When that command is itself issued from the HAresume path, the get_sync() deadlocks: it waits for the ongoing resume(the device is RPM_RESUMING), while the resume is blocked insas_drain_work() waiting for that same SMP IO to complete.\nThe deadlock needs an expander-attached SATA disk. Duringsas_resume_ha() -> sas_drain_work(), DISCE_RESUME -> sas_resume_sata()-> ata_sas_port_resume() requests ATA_EH_RESET, and the hard reset forsuch a disk is done via SMP PHY CONTROL (sas_ata_hard_reset() ->sas_phy_reset() -> sas_smp_phy_control() ->smp_execute_task_sg()). Direct-attached SATA resets throughlldd_control_phy() and SSP devices use TMFs, so neither hits this.\nReplace the get_sync()/put_sync() pair withpm_runtime_get_noresume()/pm_runtime_put(). smp_execute_task_sg() onlyneeds to hold off autosuspend while the SMP is in flight, and it mustnot try to resume the host: a sync resume issued from the HA resume pathitself is what deadlocks, and by the time sas_resume_ha() runs, hw_inithas already reinitialized the hardware, so the device is accessiblewithout one.\nThe usage reference is still required. Discovery work normally runsinside an event worker's PM reference, taken at sas_notify_port_event()notify time and held until the handler has flushed the discoqueue. sas_rediscover_ex_phy() however requeues DISCE_REVALIDATE_DOMAINfrom within the revalidation worker itself, and flush_workqueue() doesnot wait for work items queued during execution, so that chainedrevalidation runs with no outer PM reference - without theget_noresume(), its SMP could race autosuspend.\nFor the BSG path, sas_smp_handler() is the only caller which may findthe host autosuspended: expander SMP requests do not go through any SCSIdevice request queue, so nothing else in that path holds the hostawake. Resume it there with pm_runtime_resume_and_get() and check theresult.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99202https://git.kernel.org/stable/c/c9fb89246d9922ac0a45d504adb03e0bb971310chttps://git.kernel.org/stable/c/08b95ef36a64c3ae4490794bed3c35d0c3354e85https://git.kernel.org/stable/c/81e097a064b28b4a1f6ca1a8b433e659c1bd64c0#kernel #Linux#CVE_2026_99202#bot", "url": "https://infosec.exchange/users/cve/statuses/117518391868627545"}, {"timestamp": "2026-10-28T12:31:07Z", "date_only": false, "value": "2026-10-28T12:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PC8P-2J27-G7RJ", "record": "GHSA-PC8P-2J27-G7RJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:08:48.528Z", "date_only": false, "value": "2026-10-30T06:08:48.528208Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99202", "record": "BELL-CVE-2026-99202", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:42:52.198Z", "date_only": false, "value": "2026-10-30T12:42:52.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:42:52.198Z", "date_only": false, "value": "2026-10-30T12:42:52.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99202", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:52.657Z", "date_only": false, "value": "2026-10-30T13:21:52.657", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99202", "record": "FKIE_CVE-2026-99202", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:24Z", "date_only": false, "value": "2026-10-30T15:34:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PC8P-2J27-G7RJ", "record": "GHSA-PC8P-2J27-G7RJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T20:04:15.126Z", "date_only": false, "value": "2026-11-03T20:04:15.126426Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99202", "record": "BELL-CVE-2026-99202", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-05T04:42:19Z", "date_only": false, "value": "2026-11-05T04:42:19Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99202", "record": "UBUNTU-CVE-2026-99202", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T12:54:57.549Z", "anchors": {"origin": {"timestamp": "2026-10-28T10:35:56.827Z", "date_only": false, "value": "2026-10-28T10:35:56.827Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T10:35:56.827Z", "date_only": false, "value": "2026-10-28T10:35:56.827Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 699540.722981, "hours": 194.3168674947222, "days": 8.096536145613426, "min_seconds": 699540.722981, "max_seconds": 699540.722981, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T10:35:56.827Z", "date_only": false, "value": "2026-10-28T10:35:56.827Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99202", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T12:54:57.549Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}