Skip to main content
CVE-2026-99058VulnerabilityPublished Updated

chained work check · workqueue: Fix NULL current_pwq deref

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99058· Medium

Not known to be exploited · fixed in b12a25fb2b9d5dac80e419d695450cc17a51fdfd : update Microsoft when convenient.

Data as of 7 Nov 2026, 12:32 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in b12a25fb2b9d5dac80e419d695450cc17a51fdfd, 54361e4924c2c52a501b74ef10217c32f45fccfa, 6877de2c75f0dd342099a1357856e6c8d474abc3 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < b12a25fb2b9d5dac80e419d695450cc17a51fdfd
Fixed in
  • b12a25fb2b9d5dac80e419d695450cc17a51fdfd
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < 54361e4924c2c52a501b74ef10217c32f45fccfa
Fixed in
  • 54361e4924c2c52a501b74ef10217c32f45fccfa
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < 6877de2c75f0dd342099a1357856e6c8d474abc3
Fixed in
  • 6877de2c75f0dd342099a1357856e6c8d474abc3
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < 980db94e3eeefdd8a1c46f86412c33a7f7806f51
Fixed in
  • 980db94e3eeefdd8a1c46f86412c33a7f7806f51
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < 729d576df89c7e4341e58c452f8890620a610ac2
Fixed in
  • 729d576df89c7e4341e58c452f8890620a610ac2
LinuxLinuxAffected
  • ≥ 8d03ecfe471802d6afe97da97722b6924533aa82, < 73bec442f913855907b63225306dd162c18e5c71
Fixed in
  • 73bec442f913855907b63225306dd162c18e5c71

Description

CVE-2026-99058 is a vulnerability in Microsoft products version 3.0 and 4.0 involving a NULL pointer dereference in the workqueue subsystem during a chained work check. The issue could cause improper handling of workqueue pointers, potentially leading to application instability or crashes.

References

Community reviews

Loading reviews…