Get real-time updates on Telegram
CVE-2025-40242: Linux 5.15
CVE-2025-40242 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.00145 (percentile 0.03368), scored 14-Oct-2026.
Affected technology
Linux · d1340f80f0b8066321b499a376780da00560e857 to before 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d, d1340f80f0b8066321b499a376780da00560e857 to before 4913592a3358f6ec366b8346b733d5e2360b08e1, d1340f80f0b8066321b499a376780da00560e857 to before 279bde3bbb0ac0bad5c729dfa85983d75a5d7641, d1340f80f0b8066321b499a376780da00560e857 to before 64c61b4ac645222fa7b724cef616c1f862a72a40, d1340f80f0b8066321b499a376780da00560e857 to before 28c4d9bc0708956c1a736a9e49fee71b65deee81, 6aa628c45875e7b8cca81ed9447a12a0e8f3504a, a97e75203733be0a4263a78fb7b29352be150c1c, 3554b46204e67333e1fb8be0e93936fb08267c80, 5cff77b9827a956d076168b56775aad23bce87e4, 8deedce385d220f90e435f534d71d27526273515, 2225a5cd2fbc2ef0e0f78e585db3844f60416a39, 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0, 01eb3106f43335fdc02111358dae80a5c3fd324d, 4.4.284 to before 4.5, 4.9.283 to before 4.10, 4.14.247 to before 4.15, 4.19.207 to before 4.20, 5.4.148 to before 5.5, 5.10.67 to before 5.11, 5.13.19 to before 5.14, 5.14.6 to before 5.15
Linux
Linux · 5.15
Linux
Component: Not specified by the source
File: fs/gfs2/lock_dlm.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 28.0 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00145 · percentile 0.03368 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40242.html