{"metadata": {"vulnerability": "CVE-2026-99079", "count": 36, "kinds": {"milestone": 8, "sighting": 3, "kev": 0, "other": 25}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-25T10:25:14.389Z", "date_only": false, "value": "2026-09-25T10:25:14.389Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:23:26.458Z", "date_only": false, "value": "2026-10-23T12:23:26.458Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99079", "record": "UBUNTU-CVE-2026-99079", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:32Z", "date_only": false, "value": "2026-10-23T13:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7W5X-75MG-QR73", "record": "GHSA-7W5X-75MG-QR73", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:32.040Z", "date_only": false, "value": "2026-10-23T13:17:32.040", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99079", "record": "FKIE_CVE-2026-99079", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T14:06:01.562Z", "date_only": false, "value": "2026-10-23T14:06:01.562961Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117490605169013792", "record": "CVE-2026-99079", "field": "creation_timestamp", "uuid": "13b9d3ee-1d56-4b97-85ed-ef6c51bc3c24", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-99079) https://vuldb.com/vuln/425909", "url": "https://infosec.exchange/users/vuldb/statuses/117490605169013792"}, {"timestamp": "2026-10-23T14:33:16.930Z", "date_only": false, "value": "2026-10-23T14:33:16.930583Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490712343806017", "record": "CVE-2026-99079", "field": "creation_timestamp", "uuid": "41921ef2-f8de-48fe-92b6-ecfb2781f1d1", "content": "CVE-2026-99079 net/mlx5e: Prevent stale XSK buffer release on refill retry In the Linux kernel, the following vulnerability has been resolved:\nnet/mlx5e: Prevent stale XSK buffer release on refill retry\nWhen an XDP redirect to an AF_XDP socket fails because its RX ring isfull, the XSK core frees the buffer. During the subsequent batched refillof a legacy cyclic RQ, mlx5e also releases the WQE's XSK buffer beforeallocating a replacement. If that refill succeeds only partially, a WQEleft without a replacement retains its old buffer pointer.\nThe buffer can meanwhile be allocated to another WQE. A later refillretry can then free the live buffer through the stale pointer and publishthe same UMEM frame twice.\nMark the WQE as released immediately after the driver-side free. The flagis already cleared when a replacement buffer is assigned, so refillretries no longer release stale pointers.\nThe failure is silent and produces no kernel warning or splat. Astandalone legacy cyclic-RQ zero-copy libxsk reproducer, using 64-byte UDPtraffic offered at 12 Mpps, detected it: stock stopped after 2,854,914packets in 4.094 seconds, with 4,542 xdp_rx_ring_full events and 64ownership/double-publication errors. With this change it processed356,904,225 packets in 30 seconds despite 571,405 xdp_rx_ring_full events,with no ownership or data errors.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99079https://git.kernel.org/stable/c/32bbb870078d467479965c21bbc4960c57eea208https://git.kernel.org/stable/c/34d1db2b18e1c1d189e34dd51923e031815f88e3https://git.kernel.org/stable/c/639522e5056cade578a324acfa993ec6c9f7f5dchttps://git.kernel.org/stable/c/655f47477054d19de3b138840be229a1a4490d0chttps://git.kernel.org/stable/c/e01620844c5c88b6fcf819d171df8e3976a0e76f#kernel #Linux#CVE_2026_99079#bot", "url": "https://infosec.exchange/users/cve/statuses/117490712343806017"}, {"timestamp": "2026-10-23T15:31:37Z", "date_only": false, "value": "2026-10-23T15:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7W5X-75MG-QR73", "record": "GHSA-7W5X-75MG-QR73", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T14:10:21.247Z", "date_only": false, "value": "2026-10-24T14:10:21.247Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-24T14:10:21.247Z", "date_only": false, "value": "2026-10-24T14:10:21.247Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99079", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-24T14:16:54.940Z", "date_only": false, "value": "2026-10-24T14:16:54.940", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99079", "record": "FKIE_CVE-2026-99079", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-24T15:32:51Z", "date_only": false, "value": "2026-10-24T15:32:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7W5X-75MG-QR73", "record": "GHSA-7W5X-75MG-QR73", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-24T23:48:33.667Z", "date_only": false, "value": "2026-10-24T23:48:33.667040Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mynuy2aroh2s", "record": "CVE-2026-99079", "field": "creation_timestamp", "uuid": "1f4d50b0-7f45-41d8-892e-138770164b0e", "content": "\ud83d\udd34 CVE-2026-99079 - Critical (9.8)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Prevent stale XSK...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-99079/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mynuy2aroh2s"}, {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:06:45Z", "date_only": false, "value": "2026-10-25T01:06:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.210.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T14:49:03Z", "date_only": false, "value": "2026-10-26T14:49:03.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:59.462Z", "date_only": false, "value": "2026-10-28T06:07:59.462899Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99079", "record": "BELL-CVE-2026-99079", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-01T14:45:16Z", "date_only": false, "value": "2026-11-01T14:45:16.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T06:24:00.415Z", "date_only": false, "value": "2026-11-03T06:24:00.415862Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99079", "record": "BELL-CVE-2026-99079", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T14:51:38Z", "date_only": false, "value": "2026-11-05T14:51:38.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-05T14:51:38Z", "date_only": false, "value": "2026-11-05T14:51:38.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-06T08:02:51.376Z", "date_only": false, "value": "2026-11-06T08:02:51.376Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-09T23:58:35Z", "date_only": false, "value": "2026-11-09T23:58:35Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99079", "record": "UBUNTU-CVE-2026-99079", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T10:13:37.653Z", "date_only": false, "value": "2026-11-10T10:13:37.653+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-10T23:28:52.828Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:23:26.458Z", "date_only": false, "value": "2026-10-23T12:23:26.458Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:23:26.458Z", "date_only": false, "value": "2026-10-23T12:23:26.458Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 132111.542, "hours": 36.697650555555555, "days": 1.529068773148148, "min_seconds": 132111.542, "max_seconds": 132111.542, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:23:26.458Z", "date_only": false, "value": "2026-10-23T12:23:26.458Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 132111.542, "hours": 36.697650555555555, "days": 1.529068773148148, "min_seconds": 132111.542, "max_seconds": 132111.542, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:23:26.458Z", "date_only": false, "value": "2026-10-23T12:23:26.458Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-25T01:05:18Z", "date_only": false, "value": "2026-10-25T01:05:18.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99079", "record": "MSRC_CVE-2026-99079", "field": "vulnerabilities.0.remediations.1.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}