CVE-2025-40233: Linux 3.0

CVE-2025-40233 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00155 (percentile 0.04197), scored 19-Oct-2026.

Affected technology

Linux · 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 93166bc53c0e3587058327a4121daea34b4fecd5, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before a7ee72286efba1d407c6f15a0528e43593fb7007, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 93b1ab422f1966b71561158e1aedce4ec100f357, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before e92af7737a94a729225d2a5d180eaaa77fe0bbc1, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before aa6a21409dd6221bb268b56bb410e031c632ff9a, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before bb69928ed578f881e68d26aaf1a8f6e7faab3b44, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before a21750df2f6169af6e039a3bb4893d6c9564e48d, 53069d4e76954e2e63c1b3c501051c6fbcf7298c to before 78a63493f8e352296dbc7cb7b3f4973105e8679e
Linux

Linux · 3.0
Linux

Component: Not specified by the source
File: fs/ocfs2/move_extents.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 20-Oct-2026 01:47 UTC

Product: azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00155 · percentile 0.04197 · 2026-10-19
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-19 14:17:18.977832+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40233.html