CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-40242: Linux 5.15

CVE-2025-40242 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00145 (percentile 0.03368), scored 14-Oct-2026.

Affected technology

Linux · d1340f80f0b8066321b499a376780da00560e857 to before 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d, d1340f80f0b8066321b499a376780da00560e857 to before 4913592a3358f6ec366b8346b733d5e2360b08e1, d1340f80f0b8066321b499a376780da00560e857 to before 279bde3bbb0ac0bad5c729dfa85983d75a5d7641, d1340f80f0b8066321b499a376780da00560e857 to before 64c61b4ac645222fa7b724cef616c1f862a72a40, d1340f80f0b8066321b499a376780da00560e857 to before 28c4d9bc0708956c1a736a9e49fee71b65deee81, 6aa628c45875e7b8cca81ed9447a12a0e8f3504a, a97e75203733be0a4263a78fb7b29352be150c1c, 3554b46204e67333e1fb8be0e93936fb08267c80, 5cff77b9827a956d076168b56775aad23bce87e4, 8deedce385d220f90e435f534d71d27526273515, 2225a5cd2fbc2ef0e0f78e585db3844f60416a39, 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0, 01eb3106f43335fdc02111358dae80a5c3fd324d, 4.4.284 to before 4.5, 4.9.283 to before 4.10, 4.14.247 to before 4.15, 4.19.207 to before 4.20, 5.4.148 to before 5.5, 5.10.67 to before 5.11, 5.13.19 to before 5.14, 5.14.6 to before 5.15
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/gfs2/lock_dlm.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CCR priority
28.0 /100 (P4)
CVSS 3.1
7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00145 · percentile 0.03368 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40242.html