CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-23217: linux kernel 6.11; +1 more affected products

CVE-2026-23217 affects azl3 kernel 6.6.121.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00091 (percentile 0.00451), scored 20-Oct-2026.

Affected technology

linux kernel · from 6.10.10 (inclusive), before 6.11 (exclusive)
linux

linux kernel · from 6.11.1 (inclusive), before 6.18.10 (exclusive)
linux

linux kernel · 6.11
linux

linux kernel · 6.11 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f to before f8b8ec0ddde74066d4452a7a961da544f193e00f, 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f to before b1f8285bc8e3508c1fde23b5205f1270215d4984, 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f to before b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0, 82f134ddd4f5da11c277bd1aa02e2a733179725a, 6.10.10 to before 6.11
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: arch/riscv/kernel/Makefile

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-667
Product
azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00091 · percentile 0.00451 · 2026-10-20
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23217.html