Get real-time updates on Telegram
CVE-2025-40306: Linux 4.6
CVE-2025-40306 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00161 (percentile 0.04736), scored 13-Oct-2026.
Affected technology
Linux · f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before c6564ff6b53c9a8dc786b6f1c51ae7688273f931, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before ef892d2bf4f3fa2c8de1677dd307e678bdd3d865, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 15afebb9597449c444801d1ff0b8d8b311f950ab, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before bc812574de633cf9a9ad6974490e45f6a4bb5126, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before e09a096104fc65859422817fb2211f35855983fe, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 9127d1e90c90e5960c8bc72a4ce2c209691a7021, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before c2ca015ac109fd743fdde27933d59dc5ad46658e, f7ab093f74bf638ed98fd1115f3efa17e308bb7f to before 025e880759c279ec64d0f754fe65bf45961da864
Linux
Linux · 4.6
Linux
Component: Not specified by the source
File: fs/orangefs/xattr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00161 · percentile 0.04736 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40306.html