P4Verified

CVE-2026-23242: linux kernel 5.3; +4 more affected products

CVE-2026-23242 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00449 (percentile 0.37458), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.3.1 (inclusive), before 5.10.252 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.202 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.165 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.128 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.14 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.4 (exclusive)
linux

linux kernel · 5.3
linux

Linux · 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before ab61841633d10e56a58c1493a262f0d02dba2f5e, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 8564dcc12fbb372d984ab45768cae9335777b274, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before ab957056192d6bd068b3759cb2077d859cca01f0, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before ffba40b67663567481fa8a1ed5d2da36897c175d, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 87b7a036d2c73d5bb3ae2d47dee23de465db3355, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 714c99e1dc8f85f446e05be02ba83972e981a817, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before ce025f7f5d070596194315eb2e4e89d568b8a755, 8b6a361b8c482f22ac99c3273285ff16b23fba91 to before 14ab3da122bd18920ad57428f6cf4fade8385142
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/infiniband/sw/siw/siw_qp_rx.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-476
Product: azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS: 0.00449 · percentile 0.37458 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23242.html