Get real-time updates on Telegram
CVE-2026-23368: linux kernel 4.16; +5 more affected products
CVE-2026-23368 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00099 (percentile 0.00784), scored 14-Oct-2026.
Affected technology
linux kernel · from 4.16.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 4.16
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before 2b01518eabace18f7ec8b4cafd52082303080dca, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before 305afdd02ff3e694c165457793104710ec0728e5, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before c6ffc2d2338d325e1edd0c702e3ee623aa5fdc6a, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before c33523b8fd2d4c504ada18cd93f511f2a8f84217, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before 241cd64cf2e32b28ead151b1795cd8fef2b6e482, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before 2764dcb3c35de4410f642afc62cf979727470575, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before cde2d0b5ab5d03b5b6f17d4f654d8b30ccf36757, 06f502f57d0d7728f9fa0f157ec5e4111ddb98f6 to before c8dbdc6e380e7e96a51706db3e4b7870d8a9402d
Linux
Linux · 4.16
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: drivers/net/phy/phy_device.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-667
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00099 · percentile 0.00784 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23368.html