Get real-time updates on Telegram
CVE-2026-23272: linux kernel 4.10; +2 more affected products
CVE-2026-23272 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00123 (percentile 0.0186), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.9.33 (inclusive), before 4.10 (exclusive)
linux
linux kernel · from 4.10.1 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 4.10
linux
linux kernel · 4.10 · update rc6
linux
linux kernel · 4.10 · update rc7
linux
linux kernel · 4.10 · update rc8
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
Linux · 35d0ac9070ef619e3bf44324375878a1c540387b to before 25fcaef7948912652905e96922f36583a84fffed, 35d0ac9070ef619e3bf44324375878a1c540387b to before e3ccb11fc8249759d23326038c8db987ddaabc77, 35d0ac9070ef619e3bf44324375878a1c540387b to before 86bc4b1a0f672d47ac19f9022432cb6a2e01cb33, 35d0ac9070ef619e3bf44324375878a1c540387b to before 6826131c7674329335ca25df2550163eb8a1fd0c, 35d0ac9070ef619e3bf44324375878a1c540387b to before ccb8c8f3c1127cf34d18c737309897c68046bf21, 35d0ac9070ef619e3bf44324375878a1c540387b to before def602e498a4f951da95c95b1b8ce8ae68aa733a, fefdd79403e89b0c673965343b92e2e01e2713a8, 4.9.33 to before 4.10
Linux
Linux · 4.10
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/netfilter/nf_tables_api.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00123 · percentile 0.0186 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23272.html