{"metadata": {"vulnerability": "CVE-2026-99101", "count": 21, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-09-25T10:25:14.391Z", "date_only": false, "value": "2026-09-25T10:25:14.391Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99101", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99101", "record": "UBUNTU-CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:34:16.583Z", "date_only": false, "value": "2026-10-28T10:34:16.583Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99101", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T10:44:34.156Z", "date_only": false, "value": "2026-10-28T10:44:34.156612Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518124558924965", "record": "CVE-2026-99101", "field": "creation_timestamp", "uuid": "24e62c9e-583d-46e9-a79f-6e5378a27532", "content": "CVE-2026-99101 ntfs: move attribute payload before shrinking its record In the Linux kernel, the following vulnerability has been resolved:\nntfs: move attribute payload before shrinking its record\nntfs_new_attr_flags() resizes the non-resident attribute record beforemoving its name and mapping pairs to their shorter-header offsets whencompression or sparse state is cleared.\nShrinking the record first moves the following attribute over the tail ofthe old record. The subsequent memmove() therefore copies bytes from thatfollowing attribute instead of the old mapping pairs. Re-enablingcompression on an empty file persists those bytes as a malformed mappingpairs array, which ntfsck reports as a missing or invalid run length.\nMove the payload before shrinking the record, while retaining the existingresize-before-move ordering when growing it.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99101https://git.kernel.org/stable/c/7dc2c524608039d1b082a0087f7aa0751edd4ffbhttps://git.kernel.org/stable/c/0ab6dc1ac4601c8d79e5448a024daed6b0c5ef64#kernel #Linux#CVE_2026_99101#bot", "url": "https://infosec.exchange/users/cve/statuses/117518124558924965"}, {"timestamp": "2026-10-28T11:17:29Z", "date_only": false, "value": "2026-10-28T11:17:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QX38-C9RC-R9X7", "record": "GHSA-QX38-C9RC-R9X7", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:29.367Z", "date_only": false, "value": "2026-10-28T11:17:29.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99101", "record": "FKIE_CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:01Z", "date_only": false, "value": "2026-10-28T12:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QX38-C9RC-R9X7", "record": "GHSA-QX38-C9RC-R9X7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:01Z", "date_only": false, "value": "2026-10-28T12:31:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QX38-C9RC-R9X7", "record": "GHSA-QX38-C9RC-R9X7", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T01:03:21Z", "date_only": false, "value": "2026-10-29T01:03:21.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:03:21Z", "date_only": false, "value": "2026-10-29T01:03:21.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:03:21Z", "date_only": false, "value": "2026-10-29T01:03:21.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:06:42.256Z", "date_only": false, "value": "2026-10-30T06:06:42.256996Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99101", "record": "BELL-CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T19:03:49Z", "date_only": false, "value": "2026-10-30T19:03:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99101", "record": "UBUNTU-CVE-2026-99101", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T12:42:05.410Z", "date_only": false, "value": "2026-11-01T12:42:05.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99101", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-01T12:42:05.410Z", "date_only": false, "value": "2026-11-01T12:42:05.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99101", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-01T13:18:02.030Z", "date_only": false, "value": "2026-11-01T13:18:02.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99101", "record": "FKIE_CVE-2026-99101", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-01T14:47:06Z", "date_only": false, "value": "2026-11-01T14:47:06.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:47:06Z", "date_only": false, "value": "2026-11-01T14:47:06.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-01T20:02:37.469Z", "date_only": false, "value": "2026-11-01T20:02:37.469611Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99101", "record": "BELL-CVE-2026-99101", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T20:02:37.469Z", "date_only": false, "value": "2026-11-01T20:02:37.469611Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99101", "record": "BELL-CVE-2026-99101", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.151Z", "date_only": false, "value": "2026-11-02T08:02:48.151Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99101", "record": "MSRC_CVE-2026-99101", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-04T12:11:10.480Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99101", "record": "UBUNTU-CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99101", "record": "UBUNTU-CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 648670.480907, "hours": 180.18624469638888, "days": 7.507760195682871, "min_seconds": 562270.480907, "max_seconds": 648670.480907, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99101", "record": "UBUNTU-CVE-2026-99101", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T12:11:10.480Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}