{"metadata": {"vulnerability": "CVE-2026-99086", "count": 23, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2026-09-25T10:25:14.390Z", "date_only": false, "value": "2026-09-25T10:25:14.390Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99086", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99086", "record": "UBUNTU-CVE-2026-99086", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:33Z", "date_only": false, "value": "2026-10-23T13:17:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PPGF-6CF3-2QJR", "record": "GHSA-PPGF-6CF3-2QJR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:33.113Z", "date_only": false, "value": "2026-10-23T13:17:33.113", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99086", "record": "FKIE_CVE-2026-99086", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:33.113Z", "date_only": false, "value": "2026-10-23T13:17:33.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99086", "record": "FKIE_CVE-2026-99086", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-23T14:40:00.418Z", "date_only": false, "value": "2026-10-23T14:40:00.418165Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490738782635191", "record": "CVE-2026-99086", "field": "creation_timestamp", "uuid": "fe5e8235-c816-4d3c-b234-aaccec0a2bee", "content": "CVE-2026-99086 dm-integrity: validate the superblock on resume In the Linux kernel, the following vulnerability has been resolved:\ndm-integrity: validate the superblock on resume\ndm_integrity_resume() re-reads the superblock from the device so that itpicks up the flags and the recalculate position. It performs novalidation on the result, while the constructor validates the superblockit reads and sizes all the in-memory structures according to it. The usermay modify the superblock on the underlying device while the dm-integritydevice is suspended, so that the two no longer agree.\nIn particular, access_journal_data() shifts the journal entry index byic->sb->log2_sectors_per_block, while ic->journal_section_sectors and thejournal page list were computed with the value that was present atconstructor time. Increasing log2_sectors_per_block makes the index runpast the end of the journal, and dm-integrity then writes 512 bytesthrough lowmem_page_address(NULL).\nSnapshot the validated superblock in the constructor and refuse to resumeif any of the fields that describe the on-disk geometry changed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99086https://git.kernel.org/stable/c/454b67fcc28c18502e47dfb9f067b04c28628adahttps://git.kernel.org/stable/c/e9ec5cbbaf4dd3a02ae3d81719f4fcb9b609aa8ehttps://git.kernel.org/stable/c/fc79aeb86a2c244c1f1894e2d8f2966fe2b60fa2#kernel #Linux#CVE_2026_99086#bot", "url": "https://infosec.exchange/users/cve/statuses/117490738782635191"}, {"timestamp": "2026-10-23T15:31:37Z", "date_only": false, "value": "2026-10-23T15:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PPGF-6CF3-2QJR", "record": "GHSA-PPGF-6CF3-2QJR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:37Z", "date_only": false, "value": "2026-10-23T15:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PPGF-6CF3-2QJR", "record": "GHSA-PPGF-6CF3-2QJR", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T23:00:00Z", "date_only": false, "value": "2026-10-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "vulnerabilities.217.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T06:07:59.888Z", "date_only": false, "value": "2026-10-28T06:07:59.888323Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99086", "record": "BELL-CVE-2026-99086", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T06:31:50.253Z", "date_only": false, "value": "2026-10-28T06:31:50.253415Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99086", "record": "BELL-CVE-2026-99086", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T23:00:00Z", "date_only": false, "value": "2026-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T23:00:00Z", "date_only": false, "value": "2026-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-06T13:10:23.054Z", "date_only": false, "value": "2026-11-06T13:10:23.054+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4152", "record": "WID-SEC-W-2026-4152", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-06T17:26:12Z", "date_only": false, "value": "2026-11-06T17:26:12Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99086", "record": "UBUNTU-CVE-2026-99086", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T17:57:55.917Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1401171.421385, "hours": 389.2142837180555, "days": 16.217261821585648, "min_seconds": 1401171.421385, "max_seconds": 1401171.421385, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:45:04.496Z", "date_only": false, "value": "2026-10-23T12:45:04.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99086", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T17:57:55.917Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}