{"metadata": {"vulnerability": "CVE-2026-98878", "count": 39, "kinds": {"milestone": 10, "sighting": 2, "kev": 0, "other": 27}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.377Z", "date_only": false, "value": "2026-09-25T10:25:14.377Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T11:37:25.121Z", "date_only": false, "value": "2026-10-23T11:37:25.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:01:56.792Z", "date_only": false, "value": "2026-10-23T12:01:56.792075Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490117265070670", "record": "CVE-2026-98878", "field": "creation_timestamp", "uuid": "7e777730-68ca-4058-901a-2a8fa33dab23", "content": "CVE-2026-98878 irqchip/gic-v5: Immediately exec priority drop following activate In the Linux kernel, the following vulnerability has been resolved:\nirqchip/gic-v5: Immediately exec priority drop following activate\nWith GICv5 an interrupt of equal or lower priority cannot be signalleduntil there has been a priority drop. This is done via the GIC CDEOIsystem instruction. Once this has been executed, the hardware is ableto signal the next interrupt if there is one.\nAs all interrupts are programmed to have the same priority, no newinterrupts can be signalled until the priority drop has happened. Thiscan cause issues when, for example, an interrupt remains active whilea long running process takes place, such as when injecting a physicalinterrupt into a guest VM in software.\nThe GICv5 driver has so far done the priority drop as part ofirq_eoi(), i.e., at the same time as deactivating the interrupt. Thismeans that any long running process (or VM) could block incominginterrupts, effectively causing a denial of service for all otherinterrupts.\nRather than doing the EOI as part of irq_eoi() (which the name wouldsuggest would be a good place for it), move it to happen immediatelyafter acknowledging an interrupt in the main GICv5 interrupthandler. The deactivation of interrupts (GIC CDDI) remains implementedas part of irq_eoi(), which means that the same interrupt cannot besignalled a second time until deactivated by software.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98878https://git.kernel.org/stable/c/c29bb5acd0cad0b49399d1399dd1bacb39e41438https://git.kernel.org/stable/c/abf60331ebe9a9a7937a72aac7699c2907ab9307#kernel #Linux#CVE_2026_98878#bot", "url": "https://infosec.exchange/users/cve/statuses/117490117265070670"}, {"timestamp": "2026-10-23T12:18:00Z", "date_only": false, "value": "2026-10-23T12:18:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98878", "record": "UBUNTU-CVE-2026-98878", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:18:21Z", "date_only": false, "value": "2026-10-23T12:18:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W79P-WPG5-4M55", "record": "GHSA-W79P-WPG5-4M55", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T12:18:21.330Z", "date_only": false, "value": "2026-10-23T12:18:21.330", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98878", "record": "FKIE_CVE-2026-98878", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:31:36Z", "date_only": false, "value": "2026-10-23T12:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W79P-WPG5-4M55", "record": "GHSA-W79P-WPG5-4M55", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:31:36Z", "date_only": false, "value": "2026-10-23T12:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W79P-WPG5-4M55", "record": "GHSA-W79P-WPG5-4M55", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:04:56Z", "date_only": false, "value": "2026-10-24T01:04:56.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.9.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T06:56:00.811Z", "date_only": false, "value": "2026-10-26T06:56:00.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T06:56:00.811Z", "date_only": false, "value": "2026-10-26T06:56:00.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98878", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T07:17:12.297Z", "date_only": false, "value": "2026-10-26T07:17:12.297", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98878", "record": "FKIE_CVE-2026-98878", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-27T14:48:11Z", "date_only": false, "value": "2026-10-27T14:48:11.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:07Z", "date_only": false, "value": "2026-10-28T01:49:07.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:07Z", "date_only": false, "value": "2026-10-28T01:49:07.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:47.798Z", "date_only": false, "value": "2026-10-28T06:07:47.79882Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98878", "record": "BELL-CVE-2026-98878", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:36.262Z", "date_only": false, "value": "2026-10-28T06:31:36.262116Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98878", "record": "BELL-CVE-2026-98878", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T07:02:50.866Z", "date_only": false, "value": "2026-10-28T07:02:50.866Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-11-11T01:35:27Z", "date_only": false, "value": "2026-11-11T01:35:27Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98878", "record": "UBUNTU-CVE-2026-98878", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-11T18:00:00Z", "date_only": false, "value": "2026-11-11T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20261111", "record": "CVE-2026-98878", "field": "creation_timestamp", "uuid": "771fab7b-77e7-4ff4-9740-f06eb9bbf751", "url": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20261111"}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2026-11-11T23:00:00Z", "date_only": false, "value": "2026-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-12T09:19:25.091Z", "date_only": false, "value": "2026-11-12T09:19:25.091+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-12T16:07:57.147Z", "anchors": {"origin": {"timestamp": "2026-10-23T11:37:25.121Z", "date_only": false, "value": "2026-10-23T11:37:25.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T11:37:25.121Z", "date_only": false, "value": "2026-10-23T11:37:25.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 48261.879, "hours": 13.4060775, "days": 0.5585865625, "min_seconds": 48261.879, "max_seconds": 48261.879, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:37:25.121Z", "date_only": false, "value": "2026-10-23T11:37:25.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 48261.879, "hours": 13.4060775, "days": 0.5585865625, "min_seconds": 48261.879, "max_seconds": 48261.879, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:37:25.121Z", "date_only": false, "value": "2026-10-23T11:37:25.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98878", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:01:47Z", "date_only": false, "value": "2026-10-24T01:01:47.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98878", "record": "MSRC_CVE-2026-98878", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}