{"metadata": {"vulnerability": "CVE-2026-98938", "count": 27, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 18}}, "data": [{"timestamp": "2026-09-25T10:25:14.381Z", "date_only": false, "value": "2026-09-25T10:25:14.381Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98938", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:54:24.852Z", "date_only": false, "value": "2026-10-23T12:54:24.852593Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490323573387198", "record": "CVE-2026-98938", "field": "creation_timestamp", "uuid": "b5401fc5-d8dc-478c-bb46-42d9337cec92", "content": "CVE-2026-98938 rust: irq: pass RegistrationInner as cookie to request_irq In the Linux kernel, the following vulnerability has been resolved:\nrust: irq: pass RegistrationInner as cookie to request_irq\nWith commit ba268514ea14 (\"rust: devres: fix race condition due tonesting\"), Devres::new() returns Result<Self> by value instead ofinitializing in-place via PinInit. Because request_irq() is calledinside Devres::new(), registration.inner is still uninitialized when theIRQ is enabled, so accessing registration.inner.device() in the IRQcallback can read uninitialized memory.\nFix this by storing the Device and handler pointer in RegistrationInnerand passing RegistrationInner as the IRQ cookie after its fields areinitialized.\nThis is not needed in mainline because commit 98c63ce4d760 (\"rust: irq:make Registration compatible with lifetime-bound drivers\") removedDevres from irq::Registration and moved request_irq() after all fieldsare initialized.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98938https://git.kernel.org/stable/c/9a7931e847f338a687e96cde9f37e0cff83ddd84#kernel #Linux#CVE_2026_98938#bot", "url": "https://infosec.exchange/users/cve/statuses/117490323573387198"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98938", "record": "UBUNTU-CVE-2026-98938", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:14Z", "date_only": false, "value": "2026-10-23T13:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4546-WRV4-93XW", "record": "GHSA-4546-WRV4-93XW", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:14.720Z", "date_only": false, "value": "2026-10-23T13:17:14.720", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98938", "record": "FKIE_CVE-2026-98938", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:14.720Z", "date_only": false, "value": "2026-10-23T13:17:14.720", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98938", "record": "FKIE_CVE-2026-98938", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-23T15:31:31Z", "date_only": false, "value": "2026-10-23T15:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4546-WRV4-93XW", "record": "GHSA-4546-WRV4-93XW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:31Z", "date_only": false, "value": "2026-10-23T15:31:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4546-WRV4-93XW", "record": "GHSA-4546-WRV4-93XW", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T01:08:49Z", "date_only": false, "value": "2026-10-24T01:08:49.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98938", "record": "MSRC_CVE-2026-98938", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:08:49Z", "date_only": false, "value": "2026-10-24T01:08:49.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98938", "record": "MSRC_CVE-2026-98938", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:08:49Z", "date_only": false, "value": "2026-10-24T01:08:49.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98938", "record": "MSRC_CVE-2026-98938", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-24T07:00:42.701Z", "date_only": false, "value": "2026-10-24T07:00:42.701Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98938", "record": "MSRC_CVE-2026-98938", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.69.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:07:50.946Z", "date_only": false, "value": "2026-10-28T06:07:50.946932Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98938", "record": "BELL-CVE-2026-98938", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:40.341Z", "date_only": false, "value": "2026-10-28T06:31:40.341910Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98938", "record": "BELL-CVE-2026-98938", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T10:51:16Z", "date_only": false, "value": "2026-11-06T10:51:16Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98938", "record": "UBUNTU-CVE-2026-98938", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T13:10:23.054Z", "date_only": false, "value": "2026-11-06T13:10:23.054+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-09T17:23:03.321Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1487464.27811, "hours": 413.18452169722224, "days": 17.21602173738426, "min_seconds": 1487464.27811, "max_seconds": 1487464.27811, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:11:59.043Z", "date_only": false, "value": "2026-10-23T12:11:59.043Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98938", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T17:23:03.321Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}