Get real-time updates on Telegram
CVE-2025-68358: azl3 kernel 6.6.117.1-1 on Azure Linux 3.0 (exact versions not specified); +6 more affected products
CVE-2025-68358 affects azl3 kernel 6.6.117.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.0018 (percentile 0.07152), scored 24-Oct-2026. Fixed version: b0bb67385480a3aa4c54b139e4f371ddd06b5150. Fixed version: 55835646da78e83e7ad06abd741ca8fd8c0b0ea7. Fixed version: d4a81b8ec639895999275ea2472c69825cd67ea4. Fixed version: db4ae18e1b31e0421fb5312e56aefa382bbc6ece. Fixed version: 6f442808a86eef847ee10afa9e6459494ed85bb3. Fixed version: 742b90eaf394f0018352c0e10dc89763b2dd5267. Fixed version: 38e818718c5e04961eea0fa8feff3f100ce40408. Fixed version: 5.15.201. Fixed version: 6.1.164.
Affected technology
azl3 kernel 6.6.117.1-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
azl3 kernel 6.6.119.3-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
azl3 kernel 6.6.121.1-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft
azl3 kernel 6.6.119.3-3 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · Microsoft Security Response Center
- EPSS
- 0.0018 · percentile 0.07152 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-68358.html