{"metadata": {"vulnerability": "CVE-2026-98908", "count": 22, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-09-25T10:25:14.379Z", "date_only": false, "value": "2026-09-25T10:25:14.379Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T11:54:46.243Z", "date_only": false, "value": "2026-10-23T11:54:46.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:18:00Z", "date_only": false, "value": "2026-10-23T12:18:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98908", "record": "UBUNTU-CVE-2026-98908", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:18:24Z", "date_only": false, "value": "2026-10-23T12:18:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5V3G-9PP6-F3CF", "record": "GHSA-5V3G-9PP6-F3CF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T12:18:24.907Z", "date_only": false, "value": "2026-10-23T12:18:24.907", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98908", "record": "FKIE_CVE-2026-98908", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:27:30.216Z", "date_only": false, "value": "2026-10-23T12:27:30.216692Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490217761550981", "record": "CVE-2026-98908", "field": "creation_timestamp", "uuid": "ed92c254-45f1-4a69-b58a-44de3354779f", "content": "CVE-2026-98908 net: microchip: sparx5: clean up PSFP resources on flower setup failure In the Linux kernel, the following vulnerability has been resolved:\nnet: microchip: sparx5: clean up PSFP resources on flower setup failure\nsparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter andstream filter resources before adding VCAP actions. If a later stepfails, the resources allocated earlier in the function are not unwound.\nAdd error paths to release the stream filter, flow meter and stream gatewhen setup fails after they have been acquired.\nAlso make sparx5_psfp_fm_add() return the acquired flow-meter id beforethe existing-flow-meter early return. When an existing flow meter isreused, sparx5_psfp_fm_get() increments its pool reference count, but thecaller previously kept psfp_fmid as 0. If a later setup step failed, theerror path could try to delete flow-meter id 0 instead of the reused flowmeter, leaving the incremented reference behind.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98908https://git.kernel.org/stable/c/a7625d408f7f0535c2b0f05d53231d6496acd48bhttps://git.kernel.org/stable/c/a46ea3f7ee0d3ad3d5e92043232b293be2a305d3https://git.kernel.org/stable/c/640c1bd8d359ad34817f5afec0872985e87b49echttps://git.kernel.org/stable/c/46e50367338702abe3df661df7795bdada40fef7#kernel #Linux#CVE_2026_98908#bot", "url": "https://infosec.exchange/users/cve/statuses/117490217761550981"}, {"timestamp": "2026-10-23T12:31:37Z", "date_only": false, "value": "2026-10-23T12:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5V3G-9PP6-F3CF", "record": "GHSA-5V3G-9PP6-F3CF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T12:31:37Z", "date_only": false, "value": "2026-10-23T12:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5V3G-9PP6-F3CF", "record": "GHSA-5V3G-9PP6-F3CF", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:07:08Z", "date_only": false, "value": "2026-10-24T01:07:08.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-24T14:46:55Z", "date_only": false, "value": "2026-10-24T14:46:55.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-26T06:56:37.786Z", "date_only": false, "value": "2026-10-26T06:56:37.786Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T06:56:37.786Z", "date_only": false, "value": "2026-10-26T06:56:37.786Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98908", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T07:17:16.150Z", "date_only": false, "value": "2026-10-26T07:17:16.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98908", "record": "FKIE_CVE-2026-98908", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-28T06:07:49.439Z", "date_only": false, "value": "2026-10-28T06:07:49.4393Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98908", "record": "BELL-CVE-2026-98908", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:38.305Z", "date_only": false, "value": "2026-10-28T06:31:38.305814Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98908", "record": "BELL-CVE-2026-98908", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T01:48:01Z", "date_only": false, "value": "2026-11-02T01:48:01.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-02T01:48:01Z", "date_only": false, "value": "2026-11-02T01:48:01.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.147Z", "date_only": false, "value": "2026-11-02T08:02:48.147Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T18:15:40Z", "date_only": false, "value": "2026-11-03T18:15:40Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98908", "record": "UBUNTU-CVE-2026-98908", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T16:54:52.889Z", "anchors": {"origin": {"timestamp": "2026-10-23T11:54:46.243Z", "date_only": false, "value": "2026-10-23T11:54:46.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T11:54:46.243Z", "date_only": false, "value": "2026-10-23T11:54:46.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 47436.757, "hours": 13.176876944444444, "days": 0.5490365393518518, "min_seconds": 47436.757, "max_seconds": 47436.757, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:54:46.243Z", "date_only": false, "value": "2026-10-23T11:54:46.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 47436.757, "hours": 13.176876944444444, "days": 0.5490365393518518, "min_seconds": 47436.757, "max_seconds": 47436.757, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T11:54:46.243Z", "date_only": false, "value": "2026-10-23T11:54:46.243Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98908", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T01:05:23Z", "date_only": false, "value": "2026-10-24T01:05:23.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98908", "record": "MSRC_CVE-2026-98908", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}