Get real-time updates on Telegram
CVE-2025-40304: Linux 2.6.12
CVE-2025-40304 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00144 (percentile 0.03253), scored 13-Oct-2026.
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 996bfaa7372d6718b6d860bdf78f6618e850c702, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f0982400648a3e00580253e0c48e991f34d2684c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1943b69e87b0ab35032d47de0a7fca9a3d1d6fc1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ebc0730b490c7f27340b1222e01dd106e820320d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 86df8ade88d290725554cefd03101ecd0fbd3752, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 15ba9acafb0517f8359ca30002c189a68ddbb939, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d1359e11674ed4274934eac8a71877ae5ae7bbb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3637d34b35b287ab830e66048841ace404382b67
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: drivers/video/fbdev/core/bitblit.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00144 · percentile 0.03253 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40304.html