Get real-time updates on Telegram
CVE-2026-23371: linux kernel 5.10; +1 more affected products
CVE-2026-23371 affects azl3 kernel 6.6.130.1-3 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00117 (percentile 0.01587), scored 20-Oct-2026.
Affected technology
linux kernel · from 4.19.257 (inclusive), before 4.20 (exclusive)
linux
linux kernel · from 5.4.212 (inclusive), before 5.5 (exclusive)
linux
linux kernel · from 5.10.1 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 5.10
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 2279f540ea7d05f22d2f0c4224319330228586bc to before ce6253fe718811cceb3a0ae0dbf0a5941dea3eb6, 2279f540ea7d05f22d2f0c4224319330228586bc to before 65af3633caf195d397ec4c39f51ae7615bd5a627, 2279f540ea7d05f22d2f0c4224319330228586bc to before 0638bf16b7a73a2fe63624bd0d16d9fd904805c3, 2279f540ea7d05f22d2f0c4224319330228586bc to before ba1c22924ddcc280672a2a06a9ca99ee3a1b92c3, 2279f540ea7d05f22d2f0c4224319330228586bc to before d658686a1331db3bb108ca079d76deb3208ed949, 3cc3d77dc541181f97f1dc96d2977ef8359fd760, d2b65976bf1ae9d0d9dd5770cd01695559438309, 4.19.257 to before 4.20, 5.4.212 to before 5.5
Linux
Linux · 5.10
Linux
Component: Not specified by the source
Function: makes
File: kernel/sched/syscalls.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.130.1-3 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00117 · percentile 0.01587 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23371.html