CVE-2025-40243: Linux 2.6.12

CVE-2025-40243 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00155 (percentile 0.04197), scored 19-Oct-2026.

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fc56548fca732f3d3692c83b40db796259a03887, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bf1683078fbdd09a7f7f9b74121ebaa03432bd00, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a112cdd66f5a132da5235ca31a320528c86bf33, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e148ed5cda8fd96d4620c4622fb02f552a2d166a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cfafefcb0e1fc60135f7040f4aed0a4aef4f76ca, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3b447fd401824e1ccf0b769188edefe866a1e676, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 502fa92a71f344611101bd04ef1a595b8b6014f5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2048ec5b98dbdfe0b929d2e42dc7a54c389c53dd
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/hfs/mdb.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 19-Oct-2026 19:47 UTC

Product: azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00155 · percentile 0.04197 · 2026-10-19
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-19 14:17:18.977832+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40243.html