EM-20261107-VFP3
VulnerabilityMedium severity
Linux Kernel Vulnerability (CVE-2026-99283)
CVE-2026-99283
Status
Developing
Since : signals keep joining.
- First Signal
- Nov 07 20:14 UTCC41 Red Hat Security Data
- Page Born
- Nov 07 21:31 UTCsecond source joined
- Last Signal
- Nov 07 21:31 UTC5 hours before snapshot
- Sources
- 21 official · 1 research, news or crowd
- Open For
- 5 hoursso far
Life Of This Page
- 1BornA second, independent source names it.
- 2Developing · NowNew signals join; severity can move.
- 3ConfirmedNot yetCISA KEV lists it, or exploitation in the wild is reported.
- 4ResolvedNot yetPast the fix deadline and 14 days with no new signal.
- 5ArchivedNot yet30 days after resolved. Read only; the link keeps working. Reopens if it comes back.
The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.
Vulnerability Lifecycle
- Disclosed: reachedNov 07 21:17 UTCC6 NVD published
- Scored: not yetNot yetNo CVSS yet
- Exploited: not yetNot yetNo exploitation reported
- Advisories: not yetNot yetNone yet
- Vendor Response: reachedNov 07 20:14 UTCC41 published
- Resolved: not yetNot yetAfter 14 quiet days
Timeline
Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.
Signals
- GHSA-cr3v-f62w-cwx5 / CVE-2026-99283 (opens source in a new tab) In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Commit be0502a3f2e9 ("netfilter: conntrack: tcp: only close if RST matches… Med severityDatabaseC29 CIRCL Vulnerability-Lookup
- Red Hat: CVE-2026-99283 (low) (opens source in a new tab) kernel: kernel: Denial of Service via premature connection tracking expiration on TCP RST packets Info severityVendorC41 Red Hat Security Data