Get real-time updates on Telegram
CVE-2026-23398: linux kernel 3.14; +5 more affected products
CVE-2026-23398 affects azl3 kernel 6.6.126.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00124 (percentile 0.0195), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.14.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux
linux kernel · 3.14
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before 571d9d7b650f02d1e38c01128817868bceac9edd, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before d783fa413c702ff0f8f8bea63f862e28eeaf39e3, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before 1f9f2c6d4b2a613b7756fc5679c5116ba2ca0161, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before b61529c357f1ee4d64836eb142a542d2e7ad67ce, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before 9647e99d2a617c355d2b378be0ff6d0e848fd579, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before d938dd5a0ad780c891ea3bc94cae7405f11e618a, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before 1e4e2f5e48cec0cccaea9815fb9486c084ba41e2, 8ed1dc44d3e9e8387a104b1ae8f92e9a3fbf1b1e to before 614aefe56af8e13331e50220c936fc0689cf5675
Linux
Linux · 3.14
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
File: net/ipv4/icmp.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- Product
- azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00124 · percentile 0.0195 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23398.html