Get real-time updates on Telegram
CVE-2026-23318: linux kernel 5.4; +2 more affected products
CVE-2026-23318 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00132 (percentile 0.0244), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.19.84 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.3.11 (inclusive), before 5.4 (exclusive)
linux
linux kernel · from 5.4.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 5.4
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 82a7d0a1b88798de1a609130080ce0c65dd869e9, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 8307d93e63d5f54ef10412d4db2dd551e920dee4, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 0dcd1ed96c03459cf14706885c9dd3c1fd8bd29f, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before a0c6ae2ea84528f198bf7fd0117f12fd0cf6d7cc, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before d3904ca40515272681ae61ad6f561c24f190957f, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 1e5753ff4c2e86aa88516f97a224c90a3d0b133e, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 499ffd15b00dc91ac95c28f76959dfb5cdcc84d5, 57f8770620e9b51c61089751f0b5ad3dbe376ff2 to before 54f9d645a5453d0bfece0c465d34aaf072ea99fa, 17821e2fb16752f5d363fb5c3f8aab4df41b9bcc, bf74a46aebb1b5ab5e5f25bafa4ae0a453ba813a, 4.19.84 to before 4.20, 5.3.11 to before 5.4
Linux
Linux · 5.4
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: sound/usb/validate.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00132 · percentile 0.0244 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23318.html