CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23279: linux kernel from 3.13 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-23279 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00136 (percentile 0.02685), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.13 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

Linux · 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before 753ad20dcbe36b67088c7770d8fc357d7cc43e08, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before f061336f072ab03fd29270ae61fede46bf8fd69d, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before 2b5f282b1b7241ef624c3399a1cdff0bb1a3eeab, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before 22a9adea7e26d236406edc0ea00b54351dd56b9c, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before f5d8af683410a8c82e48b51291915bd612523d9a, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before cc6d5a3c0a854aeae00915fc5386570c86029c60, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before be8b82c567fda86f2cbb43b7208825125bb31421, 8f2535b92d685c68db4bc699dd78462a646f6ef9 to before 017c1792525064a723971f0216e6ef86a8c7af11
Linux

Linux · 3.13
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/mac80211/mesh.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-476
Product
azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00136 · percentile 0.02685 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23279.html