P4Verified

CVE-2025-68337: Linux 2.6.19; +3 more affected products

CVE-2025-68337 affects azl3 kernel 6.6.117.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00537 (percentile 0.43721), scored 13-Oct-2026.

Affected technology

Linux · 470decc613ab2048b619a01028072d932d9086ee to before 71bbe06c40fc59b5b15661eca8ff307f4176d7f9, 470decc613ab2048b619a01028072d932d9086ee to before ed62fd8c15d41c4127ad16b8219b63124f5962bc, 470decc613ab2048b619a01028072d932d9086ee to before 3faac6531d4818cd6be45e5bbf32937bbbc795c0, 470decc613ab2048b619a01028072d932d9086ee to before b4f8eabf6d991bd41fabcdf9302c4b3eab590cf4, 470decc613ab2048b619a01028072d932d9086ee to before a2a7f854d154a3e9232fec80782dad951655f52f, 470decc613ab2048b619a01028072d932d9086ee to before bf34c72337e40c4670cceeb79b353356933a254b, 470decc613ab2048b619a01028072d932d9086ee to before aa1703f3f706ea0867fb1991dcac709c9ec94cfb, 470decc613ab2048b619a01028072d932d9086ee to before 986835bf4d11032bba4ab8414d18fce038c61bb4
Linux

Linux · 2.6.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

Component: Not specified by the source
File: fs/jbd2/transaction.c, system

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:10 UTC

Product: azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS: 0.00537 · percentile 0.43721 · 2026-10-13
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-68337.html