{"metadata": {"vulnerability": "CVE-2026-101308", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-28T13:33:02.323Z", "date_only": false, "value": "2026-09-28T13:33:02.323Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-101308", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T18:45:00Z", "date_only": false, "value": "2026-10-14T18:45:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-101308", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T07:08:52.619Z", "date_only": false, "value": "2026-10-15T07:08:52.619Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-101308", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T07:08:52.619Z", "date_only": false, "value": "2026-10-15T07:08:52.619Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / freebsd", "record": "CVE-2026-101308", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T07:17:51.073Z", "date_only": false, "value": "2026-10-15T07:17:51.073450Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117443701676294866", "record": "CVE-2026-101308", "field": "creation_timestamp", "uuid": "d3fe8b69-d0e3-403e-9709-80c3d1390c6f", "content": "CVE-2026-101308 TOCTOU race between sound(4) buffer resizing and mmap When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.  An mmap(2) call on another thread can complete during this window, after which the resize path frees the now-mapped buffer without rechecking.\nAn unprivileged local user with access to a sound device can exploit this race to trigger a use-after-free in the kernel, potentially escalating privileges.\nhttps://www.cve.org/CVERecord?id=CVE-2026-101308https://security.freebsd.org/advisories/FreeBSD-SA-26:71.sound.asc#FreeBSD#CVE_2026_101308#bot", "url": "https://infosec.exchange/users/cve/statuses/117443701676294866"}, {"timestamp": "2026-10-15T07:17:58Z", "date_only": false, "value": "2026-10-15T07:17:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PMRJ-W7PV-P57Q", "record": "GHSA-PMRJ-W7PV-P57Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T07:17:58.007Z", "date_only": false, "value": "2026-10-15T07:17:58.007", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-101308", "record": "FKIE_CVE-2026-101308", "field": "published"}, {"timestamp": "2026-10-15T09:30:32Z", "date_only": false, "value": "2026-10-15T09:30:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PMRJ-W7PV-P57Q", "record": "GHSA-PMRJ-W7PV-P57Q", "field": "published"}, {"timestamp": "2026-10-15T15:40:09.578Z", "date_only": false, "value": "2026-10-15T15:40:09.578920Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-101308", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-15T15:40:09.578Z", "date_only": false, "value": "2026-10-15T15:40:09.578920Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-101308", "record": "FKIE_CVE-2026-101308", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T15:40:12.607Z", "date_only": false, "value": "2026-10-15T15:40:12.607Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-101308", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:40:12.607Z", "date_only": false, "value": "2026-10-15T15:40:12.607Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-101308", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:17:41.437Z", "date_only": false, "value": "2026-10-15T16:17:41.437", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-101308", "record": "FKIE_CVE-2026-101308", "field": "lastModified"}, {"timestamp": "2026-10-15T18:32:26Z", "date_only": false, "value": "2026-10-15T18:32:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PMRJ-W7PV-P57Q", "record": "GHSA-PMRJ-W7PV-P57Q", "field": "modified"}]}