CVE-2025-61594: azl3 ruby 3.3.5-6 on Azure Linux 3.0 (exact versions not specified); +9 more affected products

CVE-2025-61594 affects azl3 ruby 3.3.5-6 on Azure Linux 3.0. EPSS 0.0056 (percentile 0.4552), scored 20-Oct-2026. Fixed version: 2.3.1-2~ubuntu16.04.16+esm12. Fixed version: 2.5.1-1ubuntu1.16+esm7. Fixed version: 2.7.0-5ubuntu1.18+esm4. Fixed version: 3.0.2-7ubuntu2.12. Fixed version: 3.2.3-1ubuntu0.24.04.7. Fixed version: 3.3.8-2ubuntu2.1.

Affected technology

azl3 ruby 3.3.5-6 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft

cbl2 ruby 3.1.7-3 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft

azl3 ruby 3.3.5-7 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft

cbl2 ruby 3.1.7-4 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft

ruby2.3 · Exact affected versions not specified by the source
Vendor not specified by the source

ruby2.5 · Exact affected versions not specified by the source
Vendor not specified by the source

ruby2.7 · Exact affected versions not specified by the source
Vendor not specified by the source

ruby3.0 · Exact affected versions not specified by the source
Vendor not specified by the source

ruby3.2 · Exact affected versions not specified by the source
Vendor not specified by the source

ruby3.3 · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 22-Oct-2026 00:59 UTC

Product: azl3 ruby 3.3.5-6 on Azure Linux 3.0
CCR priority: 0.1 /100 (P5)
EPSS: 0.0056 · percentile 0.45759 · 2026-10-21
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
OSV.dev · Source record · observed 2026-10-21 16:37:07.765749+00:00 UTC
OSV.dev · Source record · observed 2026-10-21 16:37:07.765749+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-61594.html