{"metadata": {"vulnerability": "CVE-2026-98927", "count": 31, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 20}}, "data": [{"timestamp": "2026-09-25T10:25:14.380Z", "date_only": false, "value": "2026-09-25T10:25:14.380Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:06:01.528Z", "date_only": false, "value": "2026-10-23T12:06:01.528Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:47:01.174Z", "date_only": false, "value": "2026-10-23T12:47:01.174488Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490294499187441", "record": "CVE-2026-98927", "field": "creation_timestamp", "uuid": "8e3902c2-3b11-484b-8241-b837f83a6084", "content": "CVE-2026-98927 KVM: arm64: nv: Fix life cycle of the nested_mmus array In the Linux kernel, the following vulnerability has been resolved:\nKVM: arm64: nv: Fix life cycle of the nested_mmus array\nThe nested_mmus array holds the shadow page tables that are used whena guest is running a nested context. These structures are allocated onVCPU_INIT for whole guest, which implies that they may have to berelocated as the array grows.\nShould a VCPU_INIT occur whilst a vcpu is actively running an L2 andthat the allocation requires relocation, that vcpu will still berunning with a pointer to the previous structure, which will have beenfreed.\nFix this by turning the array of structures to an array of pointers,which is now allocated at VM creation, sized to the absolute maximumthat KVM can handle.\nIn turn, each VCPU_INIT contributes S2_MMU_PER_VCPU to the pool. Noreallocation is ever performed, and the life cycle of each object ismuch clearer:\n- the nested_mmus array is allocated in kvm_init_nested(), and freed  in kvm_arch_destroy_vm()\n- s2_mmu structures are allocated in kvm_vcpu_init_nested(), and freed  on kvm_arch_flush_shadow_all()\nFinally, the freeing of vcpu->arch.vncr_array is made consistentrather than being done on some failure paths, but not others.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98927https://git.kernel.org/stable/c/ea242bdc29e8a8ff0e2447a64b3841114779f3afhttps://git.kernel.org/stable/c/81e3f065a6485626f816d791dfd5e00ddd12eff5https://git.kernel.org/stable/c/512c93f4461b9a3735987f48423d438a9cd49e6ahttps://git.kernel.org/stable/c/33346f8960c7bb6a3b4e273b5cfe25c5a8be349f#kernel #Linux#CVE_2026_98927#bot", "url": "https://infosec.exchange/users/cve/statuses/117490294499187441"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98927", "record": "UBUNTU-CVE-2026-98927", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:13Z", "date_only": false, "value": "2026-10-23T13:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2374-8V6X-X95C", "record": "GHSA-2374-8V6X-X95C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:13.450Z", "date_only": false, "value": "2026-10-23T13:17:13.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98927", "record": "FKIE_CVE-2026-98927", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:31Z", "date_only": false, "value": "2026-10-23T15:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2374-8V6X-X95C", "record": "GHSA-2374-8V6X-X95C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:08:07Z", "date_only": false, "value": "2026-10-24T01:08:07.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98927", "record": "MSRC_CVE-2026-98927", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:08:07Z", "date_only": false, "value": "2026-10-24T01:08:07.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98927", "record": "MSRC_CVE-2026-98927", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:08:07Z", "date_only": false, "value": "2026-10-24T01:08:07.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98927", "record": "MSRC_CVE-2026-98927", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-24T07:00:42.679Z", "date_only": false, "value": "2026-10-24T07:00:42.679Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98927", "record": "MSRC_CVE-2026-98927", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-24T14:09:32.255Z", "date_only": false, "value": "2026-10-24T14:09:32.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-24T14:09:32.255Z", "date_only": false, "value": "2026-10-24T14:09:32.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98927", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-24T14:16:48.507Z", "date_only": false, "value": "2026-10-24T14:16:48.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98927", "record": "FKIE_CVE-2026-98927", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-24T15:32:47Z", "date_only": false, "value": "2026-10-24T15:32:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2374-8V6X-X95C", "record": "GHSA-2374-8V6X-X95C", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.58.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:07:50.260Z", "date_only": false, "value": "2026-10-28T06:07:50.260052Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98927", "record": "BELL-CVE-2026-98927", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-03T06:23:53.217Z", "date_only": false, "value": "2026-11-03T06:23:53.217104Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98927", "record": "BELL-CVE-2026-98927", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1469", "record": "CERTFR-2026-AVI-1469", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-06T13:10:23.054Z", "date_only": false, "value": "2026-11-06T13:10:23.054+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-09T23:58:05Z", "date_only": false, "value": "2026-11-09T23:58:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98927", "record": "UBUNTU-CVE-2026-98927", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T05:06:56.666Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:06:01.528Z", "date_only": false, "value": "2026-10-23T12:06:01.528Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:06:01.528Z", "date_only": false, "value": "2026-10-23T12:06:01.528Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1530055.138719, "hours": 425.0153163108333, "days": 17.708971512951386, "min_seconds": 1530055.138719, "max_seconds": 1530055.138719, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:06:01.528Z", "date_only": false, "value": "2026-10-23T12:06:01.528Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98927", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T05:06:56.666Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}