{"metadata": {"vulnerability": "CVE-2026-99004", "count": 18, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-25T10:25:14.385Z", "date_only": false, "value": "2026-09-25T10:25:14.385Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99004", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99004", "record": "UBUNTU-CVE-2026-99004", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:22Z", "date_only": false, "value": "2026-10-23T13:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-862J-6X74-2P6M", "record": "GHSA-862J-6X74-2P6M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:22.783Z", "date_only": false, "value": "2026-10-23T13:17:22.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99004", "record": "FKIE_CVE-2026-99004", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:22.783Z", "date_only": false, "value": "2026-10-23T13:17:22.783", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99004", "record": "FKIE_CVE-2026-99004", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-23T13:42:50.429Z", "date_only": false, "value": "2026-10-23T13:42:50.429251Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490513987197150", "record": "CVE-2026-99004", "field": "creation_timestamp", "uuid": "33e8ea2d-b3f6-40be-b0a7-4c069aae86e2", "content": "CVE-2026-99004 drm/imagination: Size page table preallocation by device address In the Linux kernel, the following vulnerability has been resolved:\ndrm/imagination: Size page table preallocation by device address\nCommit 0a8224058a58 (\"drm/imagination: Fix page count for page table formap() interface\") passed the device address topvr_mmu_op_context_create(), but the preallocation is still sized fromdevice_addr + sgt_offset with an exclusive end. The offset into theobject's pages has no place in a device-virtual range, and the exclusiveend allocates one table too many when the range ends on a tableboundary.\nCount the tables from device_addr and the inclusive end of the range.\nThe new calculation does not take page table indices into account. Thisfixes another issue with the previous implementation, where thedifference between start and end indices could underflow when a mappingcrossed a page table boundary. This would lead to the driverpreallocating a huge number of MMU pages, exhausting system memory andtriggering an out of memory panic.\n[Alessio: add paragraph to point out OOM bug being fixed, cc stable]\nhttps://www.cve.org/CVERecord?id=CVE-2026-99004https://git.kernel.org/stable/c/51b56bad96fd20127034f660b337c00317c65151https://git.kernel.org/stable/c/f9b215b3e37a5047c406545de51bf8a2aeb4cd1chttps://git.kernel.org/stable/c/7f73da0facf864fe796371ebaccacb1fee678aafhttps://git.kernel.org/stable/c/789f290b2e81d42820bddcb4010ffbc2ae2ded54#kernel #Linux#CVE_2026_99004#bot", "url": "https://infosec.exchange/users/cve/statuses/117490513987197150"}, {"timestamp": "2026-10-23T15:31:34Z", "date_only": false, "value": "2026-10-23T15:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-862J-6X74-2P6M", "record": "GHSA-862J-6X74-2P6M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:34Z", "date_only": false, "value": "2026-10-23T15:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-862J-6X74-2P6M", "record": "GHSA-862J-6X74-2P6M", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-25T01:04:03Z", "date_only": false, "value": "2026-10-25T01:04:03.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99004", "record": "MSRC_CVE-2026-99004", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T01:04:03Z", "date_only": false, "value": "2026-10-25T01:04:03.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99004", "record": "MSRC_CVE-2026-99004", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:04:03Z", "date_only": false, "value": "2026-10-25T01:04:03.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99004", "record": "MSRC_CVE-2026-99004", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-25T07:01:02.655Z", "date_only": false, "value": "2026-10-25T07:01:02.655Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99004", "record": "MSRC_CVE-2026-99004", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:54.994Z", "date_only": false, "value": "2026-10-28T06:07:54.994585Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99004", "record": "BELL-CVE-2026-99004", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T19:03:30Z", "date_only": false, "value": "2026-10-30T19:03:30Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99004", "record": "UBUNTU-CVE-2026-99004", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T06:23:56.322Z", "date_only": false, "value": "2026-11-03T06:23:56.322882Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99004", "record": "BELL-CVE-2026-99004", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T17:07:29.721Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1054020.599136, "hours": 292.78349976, "days": 12.19931249, "min_seconds": 1054020.599136, "max_seconds": 1054020.599136, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:20:29.122Z", "date_only": false, "value": "2026-10-23T12:20:29.122Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99004", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T17:07:29.721Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}