Get real-time updates on Telegram
CVE-2025-40285: Linux 6.13
CVE-2025-40285 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00411 (percentile 0.33714), scored 14-Oct-2026.
Affected technology
Linux · 37a0e2b362b3150317fb6e2139de67b1e29ae5ff to before 6fc935f798d44a8eb8a5e6659198399fbf57b981, 450a844c045ff0895d41b05a1cbe8febd1acfcfd to before e671f9bb97805771380c98de944e2ceab6949188, a39e31e22a535d47b14656a7d6a893c7f6cf758c to before dcc51dfe6ff26b52cac106865a172ac982d78401, b95629435b84b9ecc0c765995204a4d8a913ed52 to before d37b2c81c83d6c0d5ca582f4fe73c672983f9e0d, b95629435b84b9ecc0c765995204a4d8a913ed52 to before 379510a815cb2e64eb0a379cb62295d6ade65df0, 2107ab40629aeabbec369cf34b8cf0f288c3eb1b, 6.1.121 to before 6.1.159, 6.6.67 to before 6.6.117, 6.12.6 to before 6.12.59, 5.15.176 to before 5.16
Linux
Linux · 6.13
Linux
Component: Not specified by the source
File: fs/smb/server/smb2pdu.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00411 · percentile 0.33714 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 20:17:11.213245+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40285.html