Get real-time updates on Telegram
CVE-2026-23304: linux kernel from 4.14 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…
CVE-2026-23304 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00129 (percentile 0.02228), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.14 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
Linux · 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before d542e2ac7f9e288d49735be0775611547ca4e0ee, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before a73fe9f4ae84a239d5b2686f47a58c158aee2eb4, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before 4a48fe59f29f673a3d042d679f26629a9c3e29d4, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before 581800298313c9fd75e94985e6d37d21b7e35d34, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before 3310fc11fc47387d1dd4759b0bc961643ea11c7f, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before 0b5a7826020706057cc5a9d9009e667027f221ee, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before ae88c8256547b63980770a9ea7be73a15900d27e, 4832c30d5458387ff2533ff66fbde26ad8bb5a2d to before 2ffb4f5c2ccb2fa1c049dd11899aee7967deef5a
Linux
Linux · 4.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv6/route.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00129 · percentile 0.02228 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23304.html