Get real-time updates on Telegram
CVE-2025-40331: Linux 4.7
CVE-2025-40331 affects azl3 kernel 6.6.112.1-2 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00188 (percentile 0.07819), scored 13-Oct-2026.
Affected technology
Linux · 8f840e47f190cbe61a96945c13e9551048d42cef to before b106a68df0650b694b254427cd9250c04500edd3, 8f840e47f190cbe61a96945c13e9551048d42cef to before 3006959371007fc2eae4a078f823c680fa52de1a, 8f840e47f190cbe61a96945c13e9551048d42cef to before 72e3fea68eac8d088e44c3dd954e843478e9240e, 8f840e47f190cbe61a96945c13e9551048d42cef to before 584307275b2048991b2e8984962189b6cc0a9b85, 8f840e47f190cbe61a96945c13e9551048d42cef to before c9119f243d9c0da3c3b5f577a328de3e7ffd1b42, 8f840e47f190cbe61a96945c13e9551048d42cef to before 2fe08fcaacb7eb019fa9c81db39b2214de216677, 8f840e47f190cbe61a96945c13e9551048d42cef to before 89eac1e150dbd42963e13d23828cb8c4e0763196, 8f840e47f190cbe61a96945c13e9551048d42cef to before 95aef86ab231f047bb8085c70666059b58f53c09
Linux
Linux · 4.7
Linux
Component: Not specified by the source
File: net/sctp/diag.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00188 · percentile 0.07819 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40331.html