# watch_queue: Fix note pool publication race in watch_queue_set_size()

CVE record · `CVE-2026-99179`

- **Identifiers:** `CVE-2026-99179`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 28 Oct 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 28 Oct 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 2137d487b25eefa862be70de489b64f4c679fe1f` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 6aaa6c1a1b61aae332d6e7e0083140b86ea51e14` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 4b20867d80e7e91fb7db531f34035d91591ba405` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before da52e5fcb2cae6acdc0d5722ff83499f8232b9d1` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before f94c45f83e688e41dfe1b3a589806a0a25567260` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 811fb6d0b07605e8e8d93bde8748be4b3028809a` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 9e73a6754457ffed8399b835552013b9363e51d1` (git)
  - affected: `c73be61cede5882f9605a852414db559c0ebedfd to before 5e531d62f1f8834faf7a4eed0d41105cf6570a8f` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.8`
  - unaffected: `before 5.8` (semver)
  - unaffected: `5.10.273 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.224 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.161 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.115 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.59 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.13 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 28 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-99179](https://www.cve.org/CVERecord?id=CVE-2026-99179)
- [NVD: CVE-2026-99179](https://nvd.nist.gov/vuln/detail/CVE-2026-99179)

### References from the CNA

- <https://git.kernel.org/stable/c/2137d487b25eefa862be70de489b64f4c679fe1f>
- <https://git.kernel.org/stable/c/6aaa6c1a1b61aae332d6e7e0083140b86ea51e14>
- <https://git.kernel.org/stable/c/4b20867d80e7e91fb7db531f34035d91591ba405>
- <https://git.kernel.org/stable/c/da52e5fcb2cae6acdc0d5722ff83499f8232b9d1>
- <https://git.kernel.org/stable/c/f94c45f83e688e41dfe1b3a589806a0a25567260>
- <https://git.kernel.org/stable/c/811fb6d0b07605e8e8d93bde8748be4b3028809a>
- <https://git.kernel.org/stable/c/9e73a6754457ffed8399b835552013b9363e51d1>
- <https://git.kernel.org/stable/c/5e531d62f1f8834faf7a4eed0d41105cf6570a8f>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-99179>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-99179/>. Everything for agents: <https://agentprime.io/llms.txt>.