{"metadata": {"vulnerability": "CVE-2026-99124", "count": 20, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-25T10:25:14.393Z", "date_only": false, "value": "2026-09-25T10:25:14.393Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99124", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99124", "record": "UBUNTU-CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:34:39.370Z", "date_only": false, "value": "2026-10-28T10:34:39.370Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99124", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T11:00:02.353Z", "date_only": false, "value": "2026-10-28T11:00:02.353072Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518185383385455", "record": "CVE-2026-99124", "field": "creation_timestamp", "uuid": "d8b197e2-2214-48e1-9309-7939526f07d5", "content": "CVE-2026-99124 s390/pci: Fix leak of uninitialized kernel data in SCLP report In the Linux kernel, the following vulnerability has been resolved:\ns390/pci: Fix leak of uninitialized kernel data in SCLP report\nWhile report_error_write() checks that the provided buffer is at leastas large as the header struct, but not that it is large enough tocontain the report with the length claimed by report->length. Ifuser-space provides a short buffer, meaning a larger report->length thanthe actually written payload, up to around 4K of kernel data from pastthe kmalloc(len + 1) sized buffer allocated in kernfs_fop_write_iter()will leak into the SCLP report.\nHowever, as the entity processing the SCLP is privileged and able toaccess at least the page including the report, this does not leak datathat entity could not access but it is still an out of bounds read anda malformed error report that should be rejected.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99124https://git.kernel.org/stable/c/ba5001db9bb23ff7d2ea328c405c287ffb07786fhttps://git.kernel.org/stable/c/126a7c227d8543e13903dd5622640c1f0fcc5a16https://git.kernel.org/stable/c/8ac60ae2a307a50b599bf5d300b448d638f3ba29#kernel #Linux#CVE_2026_99124#bot", "url": "https://infosec.exchange/users/cve/statuses/117518185383385455"}, {"timestamp": "2026-10-28T11:17:32Z", "date_only": false, "value": "2026-10-28T11:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7C6Q-XH8W-H79R", "record": "GHSA-7C6Q-XH8W-H79R", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:32.077Z", "date_only": false, "value": "2026-10-28T11:17:32.077", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99124", "record": "FKIE_CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:04Z", "date_only": false, "value": "2026-10-28T12:31:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7C6Q-XH8W-H79R", "record": "GHSA-7C6Q-XH8W-H79R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T01:04:29Z", "date_only": false, "value": "2026-10-29T01:04:29.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:04:29Z", "date_only": false, "value": "2026-10-29T01:04:29.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:04:29Z", "date_only": false, "value": "2026-10-29T01:04:29.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:06:41.371Z", "date_only": false, "value": "2026-10-30T06:06:41.371083Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99124", "record": "BELL-CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:41:58.903Z", "date_only": false, "value": "2026-10-30T12:41:58.903Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99124", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:41:58.903Z", "date_only": false, "value": "2026-10-30T12:41:58.903Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99124", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:46.630Z", "date_only": false, "value": "2026-10-30T13:21:46.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99124", "record": "FKIE_CVE-2026-99124", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:22Z", "date_only": false, "value": "2026-10-30T15:34:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7C6Q-XH8W-H79R", "record": "GHSA-7C6Q-XH8W-H79R", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:03:53Z", "date_only": false, "value": "2026-10-30T19:03:53Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99124", "record": "UBUNTU-CVE-2026-99124", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T14:48:59Z", "date_only": false, "value": "2026-11-01T14:48:59.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:48:59Z", "date_only": false, "value": "2026-11-01T14:48:59.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.181Z", "date_only": false, "value": "2026-11-02T08:02:48.181Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99124", "record": "MSRC_CVE-2026-99124", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T20:04:12.449Z", "date_only": false, "value": "2026-11-03T20:04:12.449094Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99124", "record": "BELL-CVE-2026-99124", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T10:41:56.140Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99124", "record": "UBUNTU-CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99124", "record": "UBUNTU-CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 729716.140602, "hours": 202.698927945, "days": 8.445788664375002, "min_seconds": 643316.140602, "max_seconds": 729716.140602, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99124", "record": "UBUNTU-CVE-2026-99124", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-05T10:41:56.140Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}