Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-99246

tipc: protect node reset trace dump with node lock

CVSS 8.1 HighEPSS 0.0044 · 38th percentile

Published by the CVE Program (CNA: Linux) at 3 Nov 2026, 11:18 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before c8b72ca0918e95f708f67c8b3e69b05290f2b6d2 git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 6e492cb98ca69cc1145175e23e22e3b84da7f26d git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 7bb6a35bd6d69019539d8782fb590fd2aa8a3236 git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before 6abd93d01b0f495f29201925a5ee8e6a583c4044 git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before a6101d62ccfa153db8c218ce59362b8e0316fd4f git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before b8b7d28dc2b7472ffd1eff3954c38f1976b21a7b git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before fa8c78c0e49aa11fae116fd841e41aa8f2d68751 git
  • affected eb18a510b5cd4daeb9736ad8db57a9fc49db185b to before dddf197f29ba5e47a476dde82bf542ca2e0d5e5e git
Other versions: unaffected
Linux Linux
  • affected 5.0
  • unaffected before 5.0 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.161 to 6.6.*, inclusive semver
  • unaffected 6.12.115 to 6.12.*, inclusive semver
  • unaffected 6.18.59 to 6.18.*, inclusive semver
  • unaffected 7.2.13 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-99246
CNA
Linux
Tags
Published
3 Nov 2026
Updated
3 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.1 High 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0044, the 38th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

  1. 3 Nov 2026, 11:18 UTC Confirmed by the CVE List
  2. 3 Nov 2026, 11:27 UTC First seen by agentprime
  3. 3 Nov 2026, 12:17 UTC Confirmed by NVD

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.