Get real-time updates on Telegram
CVE-2026-80905: Linux 5.0
CVE-2026-80905 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00206 (percentile 0.10075), scored 20-Oct-2026.
Affected technology
Linux · 8c76e77f9069f10505c08e02646c3ee11ad79038 to before c0376820922d255ae1d103c32345a6ec4c3266f7, 8c76e77f9069f10505c08e02646c3ee11ad79038 to before f1d297cad5c1eacd9fadfd0346ad97405ffbf97c, 8c76e77f9069f10505c08e02646c3ee11ad79038 to before 5ffaa5d7f56ab24a8e23cf131eadfef31a3bbc4b, 8c76e77f9069f10505c08e02646c3ee11ad79038 to before 88b79ac89ecc04d7f2613f7e1c0b46f0c4ddb2f3, 8c76e77f9069f10505c08e02646c3ee11ad79038 to before cbb35cbe8db268fefe34c23df15348cf99025298, 3cae5ef1f37a475faf7c40bc6a3c170779f3e0b1, 4.20.1 to before 4.21
Linux
Linux · 5.0
Linux
Component: Not specified by the source
File: drivers/net/tap.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · Microsoft Security Response Center
- EPSS
- 0.00206 · percentile 0.10075 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-80905.html