{"metadata": {"vulnerability": "CVE-2026-98940", "count": 21, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-09-25T10:25:14.381Z", "date_only": false, "value": "2026-09-25T10:25:14.381Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T12:12:08.487Z", "date_only": false, "value": "2026-10-23T12:12:08.487Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T12:55:45.664Z", "date_only": false, "value": "2026-10-23T12:55:45.664062Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490328866211140", "record": "CVE-2026-98940", "field": "creation_timestamp", "uuid": "84c628bd-9c4d-4f50-8f0f-1f8b28000280", "content": "CVE-2026-98940 ASoC: qcom: lpass-cpu: use DAI table index for playback constraints In the Linux kernel, the following vulnerability has been resolved:\nASoC: qcom: lpass-cpu: use DAI table index for playback constraints\nThe DAI ID is a hardware port ID and is not necessarily the index ofthe corresponding entry in variant->dai_driver.\nWhen configuring a DAI with LPAIF_I2SCTL_MODE_QUAD01, the probe codecurrently uses dai_id to index variant->dai_driver. This is incorrectfor platforms where DAI IDs are sparse. For example, the IPQ806x MI2SDAI has ID 4 while it is the only entry in the DAI driver table. Ifthat DAI is configured for QUAD01 and probe reaches this branch, thecode writes beyond that single entry via dai_driver[4] instead ofupdating the DAI being processed.\nUse the loop index i when updating the current DAI's playback channelconstraints, while retaining dai_id for indexing the hardware-portspecific playback SD-line mode array.\nThis fixes the incorrect DAI table access for platforms where the DAIID does not match its position in the driver table.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98940https://git.kernel.org/stable/c/775df6a27e8433e2414124472938009b958f9a77https://git.kernel.org/stable/c/6833f1893ac2ec40016c348779af63debf3700d2https://git.kernel.org/stable/c/69d2b7a4c115181629eb14d800aecc3e7de3f7fbhttps://git.kernel.org/stable/c/f11336e6d3cd9e28e5cdf1cb8a6171e7c3eff4e4https://git.kernel.org/stable/c/ca51771c8efde5df05476ac98dd1b2af4e2b149f#kernel #Linux#CVE_2026_98940#bot", "url": "https://infosec.exchange/users/cve/statuses/117490328866211140"}, {"timestamp": "2026-10-23T13:17:00Z", "date_only": false, "value": "2026-10-23T13:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98940", "record": "UBUNTU-CVE-2026-98940", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T13:17:14Z", "date_only": false, "value": "2026-10-23T13:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H32J-CG7C-PPW6", "record": "GHSA-H32J-CG7C-PPW6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-23T13:17:14.960Z", "date_only": false, "value": "2026-10-23T13:17:14.960", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98940", "record": "FKIE_CVE-2026-98940", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-23T15:31:31Z", "date_only": false, "value": "2026-10-23T15:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H32J-CG7C-PPW6", "record": "GHSA-H32J-CG7C-PPW6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-24T01:08:52Z", "date_only": false, "value": "2026-10-24T01:08:52.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-24T01:08:52Z", "date_only": false, "value": "2026-10-24T01:08:52.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-25T01:01:51Z", "date_only": false, "value": "2026-10-25T01:01:51.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-26T14:47:05Z", "date_only": false, "value": "2026-10-26T14:47:05.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:39Z", "date_only": false, "value": "2026-10-28T01:49:39.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-10-28T01:49:39Z", "date_only": false, "value": "2026-10-28T01:49:39.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-28T06:07:51.732Z", "date_only": false, "value": "2026-10-28T06:07:51.73237Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98940", "record": "BELL-CVE-2026-98940", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T07:02:50.868Z", "date_only": false, "value": "2026-10-28T07:02:50.868Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98940", "record": "MSRC_CVE-2026-98940", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-30T12:40:27.052Z", "date_only": false, "value": "2026-10-30T12:40:27.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:40:27.052Z", "date_only": false, "value": "2026-10-30T12:40:27.052Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98940", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:32.277Z", "date_only": false, "value": "2026-10-30T13:21:32.277", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98940", "record": "FKIE_CVE-2026-98940", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:11Z", "date_only": false, "value": "2026-10-30T15:34:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H32J-CG7C-PPW6", "record": "GHSA-H32J-CG7C-PPW6", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:03:17Z", "date_only": false, "value": "2026-10-30T19:03:17Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98940", "record": "UBUNTU-CVE-2026-98940", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T20:04:05.887Z", "date_only": false, "value": "2026-11-03T20:04:05.887747Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-98940", "record": "BELL-CVE-2026-98940", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T12:12:54.012Z", "anchors": {"origin": {"timestamp": "2026-10-23T12:12:08.487Z", "date_only": false, "value": "2026-10-23T12:12:08.487Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T12:12:08.487Z", "date_only": false, "value": "2026-10-23T12:12:08.487Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 1123245.525802, "hours": 312.0126460561111, "days": 13.00052691900463, "min_seconds": 1123245.525802, "max_seconds": 1123245.525802, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T12:12:08.487Z", "date_only": false, "value": "2026-10-23T12:12:08.487Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98940", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T12:12:54.012Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}