CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-40283: Linux 4.11

CVE-2025-40283 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00142 (percentile 0.03105), scored 14-Oct-2026.

Affected technology

Linux · fd913ef7ce619467c6b0644af48ba1fec499c623 to before 297dbf87989e09af98f81f2bcb938041785557e8, fd913ef7ce619467c6b0644af48ba1fec499c623 to before f858f004bc343a7ae9f2533bbb2a3ab27428532f, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 7a6d1e740220ff9dfcb6a8c994d6ba49e76db198, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 5dc00065a0496c36694afe11e52a5bc64524a9b8, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 1c28c1e1522c773a94e26950ffb145e88cd9834b, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 95b9b98c93b1c0916a3d4cf4540b7f5d69145a0d, fd913ef7ce619467c6b0644af48ba1fec499c623 to before a2610ecd9fd5708be8997ca8f033e4200c0bb6af, fd913ef7ce619467c6b0644af48ba1fec499c623 to before 23d22f2f71768034d6ef86168213843fc49bf550
Linux

Linux · 4.11
Linux

Component: Not specified by the source
File: drivers/bluetooth/btusb.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00142 · percentile 0.03105 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-40283.html