CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23281: linux kernel from 2.6.24 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-23281 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00126 (percentile 0.02028), scored 14-Oct-2026.

Affected technology

linux kernel · from 2.6.24 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

Linux · 954ee164f4f4598afc172c0ec3865d0352e55a0b to before b15e0fa7adb4de3a03aee9e6fc4d83e5cf0a65e4, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before 09f3c30ab3b1371eaf9676a1b8add57bca763083, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before 3f9dec4a6d95d7f1f5e9e9dfdfa173c053bba8dc, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before 3c5c818c78b03a1725f3dcd566865c77b48dd3a6, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before d0155fe68f31b339961cf2d4f92937d57e9384e6, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before ed7d30f90b77f73a47498686ede83f622b7e4f0d, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before a9f55b14486426d907459bced5825a25063bd922, 954ee164f4f4598afc172c0ec3865d0352e55a0b to before 03cc8f90d0537fcd4985c3319b4fafbf2e3fb1f0
Linux

Linux · 2.6.24
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: uses
File: drivers/net/wireless/marvell/libertas/main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
Product
azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00126 · percentile 0.02028 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23281.html