Get real-time updates on Telegram
CVE-2025-40324: Linux 6.3
CVE-2025-40324 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00455 (percentile 0.37746), scored 13-Oct-2026.
Affected technology
Linux · 65a33135e91e6dd661ecdf1194b9d90c49ae3570 to before 930cb4fe3ab4061be31f20ee30bb72a66f7bb6d1, b11d8162c24af4a351d21e2c804d25ca493305e3 to before 375fdd8993cecc48afa359728a6e70b280dde1c8, b623a8e5d38a69a3ef8644acb1030dd7c7bc28b3 to before 2ac46606b2cc49e78d8e3d8f2685e79e9ba73020, 15a8b55dbb1ba154d82627547c5761cac884d810 to before 03524ccff698d4a77d096ed529073d91f5edee5d, 15a8b55dbb1ba154d82627547c5761cac884d810 to before a4948875ed0599c037dc438c11891c9012721b1d, 15a8b55dbb1ba154d82627547c5761cac884d810 to before 8f244b773c63fa480c9a3bd1ae04f5272f285e89, 15a8b55dbb1ba154d82627547c5761cac884d810 to before abb1f08a2121dd270193746e43b2a9373db9ad84, 3d0dcada384af22dec764c8374a2997870ec86ae, 5.10.220 to before 5.10.247, 5.15.154 to before 5.15.197, 6.1.24 to before 6.1.159, 6.2.11 to before 6.3
Linux
Linux · 6.3
Linux
Component: Not specified by the source
File: fs/nfsd/nfs4proc.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00455 · percentile 0.37746 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40324.html