# tipc: protect node reset trace dump with node lock

CVE record · `CVE-2026-99246`

- **Identifiers:** `CVE-2026-99246`
- **State:** Confirmed
- **Severity:** CVSS 8.1 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 3 Nov 2026
- **Updated:** 3 Nov 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 3 Nov 2026, 11:18 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before c8b72ca0918e95f708f67c8b3e69b05290f2b6d2` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 6e492cb98ca69cc1145175e23e22e3b84da7f26d` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 7bb6a35bd6d69019539d8782fb590fd2aa8a3236` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 6abd93d01b0f495f29201925a5ee8e6a583c4044` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before a6101d62ccfa153db8c218ce59362b8e0316fd4f` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before b8b7d28dc2b7472ffd1eff3954c38f1976b21a7b` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before fa8c78c0e49aa11fae116fd841e41aa8f2d68751` (git)
  - affected: `eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before dddf197f29ba5e47a476dde82bf542ca2e0d5e5e` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.0`
  - unaffected: `before 5.0` (semver)
  - unaffected: `5.10.273 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.224 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.161 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.115 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.59 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.13 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 8.1 High, CVSS 3.1: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0044, the 38th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

- 3 Nov 2026, 11:18 UTC: [Confirmed by the CVE List](https://www.cve.org/CVERecord?id=CVE-2026-99246)
- 3 Nov 2026, 11:27 UTC: First seen by agentprime
- 3 Nov 2026, 12:17 UTC: [Confirmed by NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-99246)

## Sources

- [CVE List: CVE-2026-99246](https://www.cve.org/CVERecord?id=CVE-2026-99246)
- [NVD: CVE-2026-99246](https://nvd.nist.gov/vuln/detail/CVE-2026-99246)

### References from the CNA

- <https://git.kernel.org/stable/c/c8b72ca0918e95f708f67c8b3e69b05290f2b6d2>
- <https://git.kernel.org/stable/c/6e492cb98ca69cc1145175e23e22e3b84da7f26d>
- <https://git.kernel.org/stable/c/7bb6a35bd6d69019539d8782fb590fd2aa8a3236>
- <https://git.kernel.org/stable/c/6abd93d01b0f495f29201925a5ee8e6a583c4044>
- <https://git.kernel.org/stable/c/a6101d62ccfa153db8c218ce59362b8e0316fd4f>
- <https://git.kernel.org/stable/c/b8b7d28dc2b7472ffd1eff3954c38f1976b21a7b>
- <https://git.kernel.org/stable/c/fa8c78c0e49aa11fae116fd841e41aa8f2d68751>
- <https://git.kernel.org/stable/c/dddf197f29ba5e47a476dde82bf542ca2e0d5e5e>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-99246>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-99246/>. Everything for agents: <https://agentprime.io/llms.txt>.