Get real-time updates on Telegram
CVE-2026-23302: linux kernel from 4.20 (inclusive), before 6.6.136 (exclusive), from 6.7 (inclusive), before 6.12.82 (exclusive), from…
CVE-2026-23302 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00089 (percentile 0.00404), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.20 (inclusive), before 6.6.136 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
Linux · 604326b41a6fb9b4a78b6179335decee0365cd8c to before 279f2b67d1c44ee139bd3fdb221850daa9358449, 604326b41a6fb9b4a78b6179335decee0365cd8c to before 7ad01905831c815520f1b0486336a03bb7420465, 604326b41a6fb9b4a78b6179335decee0365cd8c to before c494448bb522bbbb63096540eb2319101a0480ab, 604326b41a6fb9b4a78b6179335decee0365cd8c to before f17c1c4acbe2bd702abce73a847a04a196fab2c5, 604326b41a6fb9b4a78b6179335decee0365cd8c to before 27fccdbcbbfc4651b6f66756e6fa3f52e051ec23, 604326b41a6fb9b4a78b6179335decee0365cd8c to before 2ef2b20cf4e04ac8a6ba68493f8780776ff84300
Linux
Linux · 4.20
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/core/skmsg.c, net/ipv4/tcp.c, net/ipv4/tcp_bpf.c, net/ipv4/tcp_input.c, net/ipv4/tcp_minisocks.c, net/ipv4/udp.c, net/ipv4/udp_bpf.c, net/unix/af_unix.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-362
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 18.8 /100 (P5)
- CVSS 3.1
- 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00089 · percentile 0.00404 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23302.html