Get real-time updates on Telegram
CVE-2025-68376: Linux 6.6
CVE-2025-68376 affects azl3 kernel 6.6.117.1-1 on Azure Linux 3.0. CVSS 3.1 base score 6.4 (Microsoft Security Response Center). EPSS 0.00186 (percentile 0.07726), scored 20-Oct-2026.
Affected technology
Linux · bd2767ec3df2775bc336f441f9068a989ccb919d to before 5d5d130835b417c7bfd6c942f0149e34397d4463, bd2767ec3df2775bc336f441f9068a989ccb919d to before 4e83434247ff8005a0b9a1ee997864abf8f259ec, bd2767ec3df2775bc336f441f9068a989ccb919d to before 70acbc9c77686b7a521af6d7a543dcd9c324cf07, bd2767ec3df2775bc336f441f9068a989ccb919d to before cda077a19f5c8d6ec61e5b97deca203d95e3a422, bd2767ec3df2775bc336f441f9068a989ccb919d to before 35501ac3c7d40a7bb9568c2f89d6b56beaf9bed3, fdd3ceb0001da6768bede9779a0190a42e65c404, 6.5.8 to before 6.6
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: drivers/hwtracing/coresight/coresight-tmc-etr.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
- CCR priority
- 25.6 /100 (P4)
- CVSS 3.1
- 6.4 /10 · CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · Microsoft Security Response Center
- EPSS
- 0.00186 · percentile 0.07726 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-68376.html