CVE-2025-40244: Linux 2.6.12

CVE-2025-40244 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00155 (percentile 0.04196), scored 19-Oct-2026.

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c1ec90bed504640a42bb20a5f413be39cd17ad71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b8a72692aa42b7dcd179a96b90bc2763ac74576a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c135b8dca65526aa5b8814e9954e0ae317d9c598, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d7e313039a8f3a6ee072dc5ff4643234d2d735cf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a5bfb13b4f406aef1a450f99d22d3e48df01528c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 99202d94909d323a30d154ab0261c0a07166daec, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 14c673a2f3ecf650b694a52a88688f1d71849899, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4840ceadef4290c56cc422f0fc697655f3cbf070
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: fs/hfsplus/bfind.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 19-Oct-2026 19:47 UTC

Product: azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00155 · percentile 0.04196 · 2026-10-19
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-19 14:17:18.977832+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40244.html