{"metadata": {"vulnerability": "CVE-2026-99259", "count": 12, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-25T10:25:14.404Z", "date_only": false, "value": "2026-09-25T10:25:14.404Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99259", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99259", "record": "UBUNTU-CVE-2026-99259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99259", "record": "UBUNTU-CVE-2026-99259", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T11:25:14.989Z", "date_only": false, "value": "2026-11-03T11:25:14.989Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99259", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T11:32:09.858Z", "date_only": false, "value": "2026-11-03T11:32:09.858889Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117552285543644209", "record": "CVE-2026-99259", "field": "creation_timestamp", "uuid": "444b9ce5-dde6-4df9-8554-230439d7619e", "content": "CVE-2026-99259 soc/tegra: pmc: Fix uninitialised clock rate In the Linux kernel, the following vulnerability has been resolved:\nsoc/tegra: pmc: Fix uninitialised clock rate\nFor legacy 32-bit Tegra devices, the warning in thetegra_pmc_enter_suspend_mode() function is being triggered because theearly_pmc->rate variable is never configured and hence, always 0. Thisissue started occurring after updating the PMC driver to create the PMCcontext dynamically which causes the 'rate' to be set in the new dynamiccontext, but missed updating the rate in the early PMC context.\nFix this by initialising the early_pmc->rate variable for 32-bit Tegradevices when the rate for the PMC context is initialised.\n[treding@nvidia.com: move assignment to existing #ifdef block]\nhttps://www.cve.org/CVERecord?id=CVE-2026-99259https://git.kernel.org/stable/c/43bc7d5707bbbf75e56db849b987193d6e866ec6https://git.kernel.org/stable/c/c5c95dbdc9011a56359df4dc00be829bbcc0b036#kernel #Linux#CVE_2026_99259#bot", "url": "https://infosec.exchange/users/cve/statuses/117552285543644209"}, {"timestamp": "2026-11-03T11:40:47.014Z", "date_only": false, "value": "2026-11-03T11:40:47.014Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99259", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-03T11:40:47.014Z", "date_only": false, "value": "2026-11-03T11:40:47.014Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99259", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T12:17:32Z", "date_only": false, "value": "2026-11-03T12:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRWJ-WRMJ-995M", "record": "GHSA-MRWJ-WRMJ-995M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T12:17:32.847Z", "date_only": false, "value": "2026-11-03T12:17:32.847", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99259", "record": "FKIE_CVE-2026-99259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:17:32.847Z", "date_only": false, "value": "2026-11-03T12:17:32.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99259", "record": "FKIE_CVE-2026-99259", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T12:31:50Z", "date_only": false, "value": "2026-11-03T12:31:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRWJ-WRMJ-995M", "record": "GHSA-MRWJ-WRMJ-995M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T12:31:51Z", "date_only": false, "value": "2026-11-03T12:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRWJ-WRMJ-995M", "record": "GHSA-MRWJ-WRMJ-995M", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T09:17:06.812Z", "anchors": {"origin": {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99259", "record": "UBUNTU-CVE-2026-99259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99259", "record": "UBUNTU-CVE-2026-99259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 119826.812649, "hours": 33.285225735833336, "days": 1.3868844056597223, "min_seconds": 33426.812649, "max_seconds": 119826.812649, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99259", "record": "UBUNTU-CVE-2026-99259", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T09:17:06.812Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}