Get real-time updates on Telegram
CVE-2025-40338: Linux 5.19
CVE-2025-40338 affects azl3 kernel 6.6.117.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.0 (Microsoft Security Response Center). EPSS 0.00215 (percentile 0.11265), scored 20-Oct-2026.
Affected technology
Linux · f1b3b320bd6519b16e3480f74f2926d106e3bcba to before 0a187ea7a5b4e78b9be1f9c1507cff04f3ae4ab1, f1b3b320bd6519b16e3480f74f2926d106e3bcba to before a80a82f567f7c6276d96409377d4691ea30d18a2, f1b3b320bd6519b16e3480f74f2926d106e3bcba to before 128bf29c992988f8b4f3829227339908fde5ec86, f1b3b320bd6519b16e3480f74f2926d106e3bcba to before 4dee5c1cc439b0d5ef87f741518268ad6a95b23d
Linux
Linux · 5.19
Linux
Component: Not specified by the source
File: sound/soc/intel/avs/pcm.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
- CCR priority
- 28.1 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.00215 · percentile 0.11265 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40338.html