CVE-2025-68209: Linux 6.0

CVE-2025-68209 affects azl3 kernel 6.6.119.3-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00185 (percentile 0.07608), scored 20-Oct-2026.

Affected technology

Linux · cdd04f4d4d71cbf93d0d9abe63bc838f47c467fa to before 1a7865e3e4de2830d8a9fe8c273dc10b248b7338, cdd04f4d4d71cbf93d0d9abe63bc838f47c467fa to before a39d334c9840705af69f0466f8f0129c366004ca, cdd04f4d4d71cbf93d0d9abe63bc838f47c467fa to before 08469f5393a1a39f26a6e2eb2e8c33187665c1f4, cdd04f4d4d71cbf93d0d9abe63bc838f47c467fa to before e5eba42f01340f73888dfe560be2806057c25913
Linux

Linux · 6.0
Linux

Component: Not specified by the source
Function: are, by, intended, to, and
File: drivers/infiniband/hw/mlx5/cq.c, drivers/net/ethernet/mellanox/mlx5/core/cq.c, drivers/net/ethernet/mellanox/mlx5/core/en_main.c, drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c, drivers/net/ethernet/mellanox/mlx5/core/steering/hws/send.c, drivers/net/ethernet/mellanox/mlx5/core/steering/sws/dr_send.c, drivers/vdpa/mlx5/net/mlx5_vnet.c, include/linux/mlx5/cq.h

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 21-Oct-2026 16:29 UTC

Product: azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · Microsoft Security Response Center
EPSS: 0.00185 · percentile 0.07608 · 2026-10-20
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-68209.html