CVE record · CVE-2026-99179

watch_queue: Fix note pool publication race in watch_queue_set_size()

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 28 Oct 2026, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 2137d487b25eefa862be70de489b64f4c679fe1f git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 6aaa6c1a1b61aae332d6e7e0083140b86ea51e14 git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 4b20867d80e7e91fb7db531f34035d91591ba405 git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before da52e5fcb2cae6acdc0d5722ff83499f8232b9d1 git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before f94c45f83e688e41dfe1b3a589806a0a25567260 git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 811fb6d0b07605e8e8d93bde8748be4b3028809a git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 9e73a6754457ffed8399b835552013b9363e51d1 git
  • affected c73be61cede5882f9605a852414db559c0ebedfd to before 5e531d62f1f8834faf7a4eed0d41105cf6570a8f git
Other versions: unaffected
Linux Linux
  • affected 5.8
  • unaffected before 5.8 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.161 to 6.6.*, inclusive semver
  • unaffected 6.12.115 to 6.12.*, inclusive semver
  • unaffected 6.18.59 to 6.18.*, inclusive semver
  • unaffected 7.2.13 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-99179
CNA
Linux
Published
28 Oct 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 28 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.