{"metadata": {"vulnerability": "CVE-2026-99201", "count": 18, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-25T10:25:14.400Z", "date_only": false, "value": "2026-09-25T10:25:14.400Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-99201", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99201", "record": "UBUNTU-CVE-2026-99201", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:35:56.069Z", "date_only": false, "value": "2026-10-28T10:35:56.069Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-99201", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T11:17:41Z", "date_only": false, "value": "2026-10-28T11:17:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q237-Q634-6984", "record": "GHSA-Q237-Q634-6984", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T11:17:41.250Z", "date_only": false, "value": "2026-10-28T11:17:41.250", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99201", "record": "FKIE_CVE-2026-99201", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T11:51:52.657Z", "date_only": false, "value": "2026-10-28T11:51:52.657321Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518389224685534", "record": "CVE-2026-99201", "field": "creation_timestamp", "uuid": "b3f8bdca-e2e4-4cb9-8719-a637b3666410", "content": "CVE-2026-99201 netlink: avoid hashing the network namespace pointer In the Linux kernel, the following vulnerability has been resolved:\nnetlink: avoid hashing the network namespace pointer\nThe netlink rhashtable key includes a raw struct net pointer and auser-controlled port ID. Both /proc/net/netlink and socket diagnosticsexpose the table's bucket order. By binding and rebinding chosenNETLINK_USERSOCK port IDs, an unprivileged reader can distinguish equalbuckets and recover the low bits of the Jenkins hash. Its 32-bit seedand the limited set of kernel-image slides can then be searched offlineto recover the address of init_net.\nUse the namespace's unique, non-address net_cookie in the comparisonkey instead. It is assigned before the per-net initializers run andremains unchanged for the namespace's lifetime. The lookup key andobject hash are still built by netlink_compare_arg_init(), keepinglookup, insertion, removal and rehashing consistent while preservingnamespace separation. Neither public table walker needs to change.\nReading the socket's namespace cookie in netlink_compare() is safeunder RCU, including during namespace teardown. netlink_release()removes the socket from the hash table and defers its final put withcall_rcu(). cleanup_net() runs the per-net exit methods and waits foroutstanding RCU callbacks with rcu_barrier() before freeing namespacestorage.\nUnlike ns.ns_id, net_cookie is also available and initialized duringsetup_net() in older stable kernels, making the change straightforwardto backport to v5.15 and later.\nhttps://www.cve.org/CVERecord?id=CVE-2026-99201https://git.kernel.org/stable/c/bdd55b8a8acbf6b4840ab420eb6a63774bf4593bhttps://git.kernel.org/stable/c/078deff25f8a849ecd1c3fe17b1e473b1cf44f28https://git.kernel.org/stable/c/f88bb3606e4bd11ee035b682cddc2999e604609a#kernel #Linux#CVE_2026_99201#bot", "url": "https://infosec.exchange/users/cve/statuses/117518389224685534"}, {"timestamp": "2026-10-28T12:31:08Z", "date_only": false, "value": "2026-10-28T12:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q237-Q634-6984", "record": "GHSA-Q237-Q634-6984", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T01:08:23Z", "date_only": false, "value": "2026-10-29T01:08:23.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:08:23Z", "date_only": false, "value": "2026-10-29T01:08:23.000Z", "kind": "other", "label": "None available", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "vulnerabilities.0.remediations.0.date", "linked_record": true}, {"timestamp": "2026-10-29T01:08:23Z", "date_only": false, "value": "2026-10-29T01:08:23.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T12:42:51.128Z", "date_only": false, "value": "2026-10-30T12:42:51.128Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-99201", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:42:51.128Z", "date_only": false, "value": "2026-10-30T12:42:51.128Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-99201", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T13:21:52.503Z", "date_only": false, "value": "2026-10-30T13:21:52.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-99201", "record": "FKIE_CVE-2026-99201", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T15:34:24Z", "date_only": false, "value": "2026-10-30T15:34:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q237-Q634-6984", "record": "GHSA-Q237-Q634-6984", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T19:04:06Z", "date_only": false, "value": "2026-10-30T19:04:06Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99201", "record": "UBUNTU-CVE-2026-99201", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-01T14:52:43Z", "date_only": false, "value": "2026-11-01T14:52:43.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T14:52:43Z", "date_only": false, "value": "2026-11-01T14:52:43.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-02T08:02:48.157Z", "date_only": false, "value": "2026-11-02T08:02:48.157Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-99201", "record": "MSRC_CVE-2026-99201", "field": "document.tracking.generator.date", "linked_record": true}], "metrics": {"as_of": "2026-11-04T12:36:08.467Z", "anchors": {"origin": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99201", "record": "UBUNTU-CVE-2026-99201", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99201", "record": "UBUNTU-CVE-2026-99201", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 650168.467402, "hours": 180.6023520561111, "days": 7.5250980023379626, "min_seconds": 563768.467402, "max_seconds": 650168.467402, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-99201", "record": "UBUNTU-CVE-2026-99201", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T12:36:08.467Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}