CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23318: linux kernel 5.4; +2 more affected products

CVE-2026-23318 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00132 (percentile 0.0244), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.19.84 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.3.11 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 82a7d0a1b88798de1a609130080ce0c65dd869e9, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 8307d93e63d5f54ef10412d4db2dd551e920dee4, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 0dcd1ed96c03459cf14706885c9dd3c1fd8bd29f, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before a0c6ae2ea84528f198bf7fd0117f12fd0cf6d7cc, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before d3904ca40515272681ae61ad6f561c24f190957f, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 1e5753ff4c2e86aa88516f97a224c90a3d0b133e, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 499ffd15b00dc91ac95c28f76959dfb5cdcc84d5, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 54f9d645a5453d0bfece0c465d34aaf072ea99fa, 17821e2fb16752f5d363fb5c3f8aab4df41b9bcc, bf74a46aebb1b5ab5e5f25bafa4ae0a453ba813a, 4.19.84 to before 4.20, 5.3.11 to before 5.4
Linux

Linux · 5.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: sound/usb/validate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-125
Product
azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS
0.00132 · percentile 0.0244 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23318.html