Get real-time updates on Telegram
CVE-2025-68188: Linux 4.12
CVE-2025-68188 affects azl3 kernel 6.6.119.3-3 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (Microsoft Security Response Center). EPSS 0.00199 (percentile 0.09119), scored 20-Oct-2026.
Affected technology
Linux · cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before e61dfd906ad027a4ade1f89e5fe706a3fcd52527, cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before bc2b881a0896c111c1041d8bb1f92a3b3873ace5, cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before 06da08d9355bf8e2070459bbedbe372ccc02cc0e, cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before b62a59c18b692f892dcb8109c1c2e653b2abc95c
Linux
Linux · 4.12
Linux
Component: Not specified by the source
File: net/ipv4/tcp_fastopen.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Microsoft Security Response Center
- EPSS
- 0.00199 · percentile 0.09119 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-68188.html