{"metadata": {"vulnerability": "CVE-2026-99151", "count": 15, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-25T10:25:14.396Z", "date_only": false, "value": "2026-09-25T10:25:14.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99151", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99151", "record": "UBUNTU-CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:35:06.866Z", "date_only": false, "value": "2026-10-28T10:35:06.866Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99151", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T10:35:06.866Z", "date_only": false, "value": "2026-10-28T10:35:06.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99151", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T10:35:06.866Z", "date_only": false, "value": "2026-10-28T10:35:06.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99151", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T11:17:35Z", "date_only": false, "value": "2026-10-28T11:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FF22-8XJR-7629", "record": "GHSA-FF22-8XJR-7629", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:35.207Z", "date_only": false, "value": "2026-10-28T11:17:35.207", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99151", "record": "FKIE_CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:17:35.207Z", "date_only": false, "value": "2026-10-28T11:17:35.207", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99151", "record": "FKIE_CVE-2026-99151", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-28T11:18:12.853Z", "date_only": false, "value": "2026-10-28T11:18:12.853203Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518256855616909", "record": "CVE-2026-99151", "field": "creation_timestamp", "uuid": "e1969408-9c7d-482d-a9b6-4b05002f6f53", "content": "CVE-2026-99151 drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions In the Linux kernel, the following vulnerability has been resolved:\ndrm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions\nallocate_usb4_bandwidth_for_stream() and allocate_usb4_bandwidth() bothuse ASSERT(stream->sink) before dereferencing stream->sink->link. ASSERTis compiled out in production builds, so a NULL stream->sink causes aNULL pointer dereference.\nlink_set_dpms_off() already guards two earlier accesses to stream->sinkwith explicit NULL checks, confirming that stream->sink can legitimatelybe NULL. The subsequent call to deallocate_usb4_bandwidth() had noequivalent guard.\nReplace the ASSERT() calls with proper NULL checks that return falseearly, and add a matching stream->sink guard at the call site inlink_set_dpms_off() consistent with the surrounding pattern.\nv2: Keep the existing ASSERT() calls for diagnostics (to report    unexpected NULL sink), and add explicit NULL checks that return false    before dereferencing stream->sink. Also add a matching stream->sink    guard at the deallocation call site in link_set_dpms_off(). (Alex)\n(cherry picked from commit 98029a0ce61feb52c563f65349dd9b25f672e355)\nhttps://www.cve.org/CVERecord?id=CVE-2026-99151https://git.kernel.org/stable/c/4c8b5e5b9776ad08138d79b14238c5742b32911bhttps://git.kernel.org/stable/c/55a67aa89342545b89f469dea6f29bfb6fac6f3d#kernel #Linux#CVE_2026_99151#bot", "url": "https://infosec.exchange/users/cve/statuses/117518256855616909"}, {"timestamp": "2026-10-28T12:31:05Z", "date_only": false, "value": "2026-10-28T12:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FF22-8XJR-7629", "record": "GHSA-FF22-8XJR-7629", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T12:31:05Z", "date_only": false, "value": "2026-10-28T12:31:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FF22-8XJR-7629", "record": "GHSA-FF22-8XJR-7629", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T00:14:53Z", "date_only": false, "value": "2026-10-30T00:14:53Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99151", "record": "UBUNTU-CVE-2026-99151", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T06:08:46.733Z", "date_only": false, "value": "2026-10-30T06:08:46.733257Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99151", "record": "BELL-CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T06:35:38.932Z", "date_only": false, "value": "2026-10-30T06:35:38.932744Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99151", "record": "BELL-CVE-2026-99151", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T06:35:38.932Z", "date_only": false, "value": "2026-10-30T06:35:38.932744Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-99151", "record": "BELL-CVE-2026-99151", "field": "withdrawn", "linked_record": true}], "metrics": {"as_of": "2026-11-04T16:59:47.793Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99151", "record": "UBUNTU-CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99151", "record": "UBUNTU-CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 665987.793406, "hours": 184.99660927944444, "days": 7.708192053310185, "min_seconds": 579587.793406, "max_seconds": 665987.793406, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99151", "record": "UBUNTU-CVE-2026-99151", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T16:59:47.793Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}