{"metadata": {"vulnerability": "CVE-2026-98873", "count": 35, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 24}}, "data": [{"timestamp": "2026-09-25T10:25:14.377Z", "date_only": false, "value": "2026-09-25T10:25:14.377Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T11:37:14.109Z", "date_only": false, "value": "2026-10-23T11:37:14.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T11:58:35.174Z", "date_only": false, "value": "2026-10-23T11:58:35.174158Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490104050379285", "record": "CVE-2026-98873", "field": "creation_timestamp", "uuid": "7c23e5e0-00ac-4ff5-ae24-14f3e3611d23", "content": "CVE-2026-98873 netfilter: nf_conntrack_expect: zero at allocation time In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nf_conntrack_expect: zero at allocation time\nThere are occasional LLM hints wrt. leaking uninitialized data touserspace via ctnetlink.  Just zero at allocation time,expectations are not frequently used these days.\nIntentionally keeps _init as-is because we could theoreticallysupport re-init, so add the missing exp->dir there.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98873https://git.kernel.org/stable/c/39cb6ff947c16a576ea68c5f272e634acdcb0085https://git.kernel.org/stable/c/90545aa07a183887e9d72ce573c18e08f62e2c91https://git.kernel.org/stable/c/9c11d7ea5ff4dbe162e79f00188814ef5483c295https://git.kernel.org/stable/c/b7f3ee925aee9f1f547d539bc03c35433c238958https://git.kernel.org/stable/c/824397af7bfe14edad374c64253dae0187ca623dhttps://git.kernel.org/stable/c/a39ecb856514274c80d0fac4d128dba6b266a8edhttps://git.kernel.org/stable/c/241ccd2fed9051db443aadce248fc0ab30f55e97#kernel #Linux#CVE_2026_98873#bot", "url": "https://infosec.exchange/users/cve/statuses/117490104050379285"}, {"timestamp": "2026-10-23T12:18:00Z", "date_only": false, "value": "2026-10-23T12:18:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98873", "record": "UBUNTU-CVE-2026-98873", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:18:20Z", "date_only": false, "value": "2026-10-23T12:18:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9V8R-RM7R-2XX4", "record": "GHSA-9V8R-RM7R-2XX4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T12:18:20.753Z", "date_only": false, "value": "2026-10-23T12:18:20.753", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98873", "record": "FKIE_CVE-2026-98873", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:31:36Z", "date_only": false, "value": "2026-10-23T12:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9V8R-RM7R-2XX4", "record": "GHSA-9V8R-RM7R-2XX4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:31:36Z", "date_only": false, "value": "2026-10-23T12:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9V8R-RM7R-2XX4", "record": "GHSA-9V8R-RM7R-2XX4", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T14:45:17Z", "date_only": false, "value": "2026-10-24T14:45:17.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.4.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T01:03:50Z", "date_only": false, "value": "2026-10-26T01:03:50.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-26T06:55:54.978Z", "date_only": false, "value": "2026-10-26T06:55:54.978Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T06:55:54.978Z", "date_only": false, "value": "2026-10-26T06:55:54.978Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98873", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T07:17:11.740Z", "date_only": false, "value": "2026-10-26T07:17:11.740", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98873", "record": "FKIE_CVE-2026-98873", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-27T06:07:03.363Z", "date_only": false, "value": "2026-10-27T06:07:03.363443Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98873", "record": "BELL-CVE-2026-98873", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-27T20:01:48.703Z", "date_only": false, "value": "2026-10-27T20:01:48.703594Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98873", "record": "BELL-CVE-2026-98873", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T01:46:35Z", "date_only": false, "value": "2026-11-02T01:46:35.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-02T01:46:35Z", "date_only": false, "value": "2026-11-02T01:46:35.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.169Z", "date_only": false, "value": "2026-11-02T08:02:48.169Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-06T10:51:01Z", "date_only": false, "value": "2026-11-06T10:51:01Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98873", "record": "UBUNTU-CVE-2026-98873", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T13:10:23.054Z", "date_only": false, "value": "2026-11-06T13:10:23.054+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-08T15:20:59.096Z", "anchors": {"origin": {"timestamp": "2026-10-23T11:37:14.109Z", "date_only": false, "value": "2026-10-23T11:37:14.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T11:37:14.109Z", "date_only": false, "value": "2026-10-23T11:37:14.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 48347.891, "hours": 13.429969722222223, "days": 0.5595820717592593, "min_seconds": 48347.891, "max_seconds": 48347.891, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:37:14.109Z", "date_only": false, "value": "2026-10-23T11:37:14.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 48347.891, "hours": 13.429969722222223, "days": 0.5595820717592593, "min_seconds": 48347.891, "max_seconds": 48347.891, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:37:14.109Z", "date_only": false, "value": "2026-10-23T11:37:14.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98873", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:03:02Z", "date_only": false, "value": "2026-10-24T01:03:02.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98873", "record": "MSRC_CVE-2026-98873", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}