P4Verified

CVE-2026-23277: linux kernel from 4.5 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-23277 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00122 (percentile 0.01823), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.5 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.19 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.9 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

Linux · 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 383493b9940e3d1b5517424081b3e072e20ec43c, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 6b1f563d670162e188a0f2aec39c24b67b106e17, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 57c153249143333bbf4ecf927bdf8aa2696ee397, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 59b06d8b9bdb6b64b3c534c18da68bce5ccd31be, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 81a43e8005366f16e629d8c95dfe05beaa8d36a7, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 0bad9c86edd22dec4df83c2b29872d66fd8a2ff4, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 21ea283c2750c8307aa35ee832b0951cc993c27d, 039f50629b7f860f36644ed1f34b27da9aa62f43 to before 0cc0c2e661af418bbf7074179ea5cfffc0a5c466
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/sched/sch_teql.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-476
Product: azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00122 · percentile 0.01823 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23277.html