CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23296: linux kernel 6.0; +2 more affected products

CVE-2026-23296 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00123 (percentile 0.01845), scored 14-Oct-2026.

Affected technology

linux kernel · from 5.10.223 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.164 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.19.12 (inclusive), before 6.0 (exclusive)
linux

linux kernel · from 6.0.1 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 6.0
linux

linux kernel · 6.0 · update rc5
linux

linux kernel · 6.0 · update rc6
linux

linux kernel · 6.0 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

Linux · f818708eeeae793e12dc39f8984ed7732048a7d9 to before 0e274674714427dc578bb99db5b86e312d2b57f8, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before 9f5e4abed9248448aa1b45b12ab0bea4d329b56a, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before 7c01b680beaf4d3143866b062b8e770e8b237fb8, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before ec5c17c687b189dbc09dfdec11b669caa40bc395, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before 944a333c8e4d42256556c1d2ebb6d773a33e0dcd, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before a03d96598d39fdf605d90731db3ef3b13fb8bdc8, 8fe4ce5836e932f5766317cb651c1ff2a4cd0506 to before 1ac22c8eae81366101597d48360718dff9b9d980, 5ce8fad941233e81f2afb5b52a3fcddd3ba8732f, 2e7eb4c1e8af8385de22775bd0be552f59b28c9a, 5.15.164 to before 5.15.203, 5.10.223 to before 5.11, 5.19.12 to before 5.20
Linux

Linux · 6.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/scsi/scsi_scan.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00123 · percentile 0.01845 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23296.html