CVE-2026-89477: Linux 4.11

CVE-2026-89477 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.5 (msrc). EPSS 0.00501 (percentile 0.40782), scored 05-Oct-2026.

Affected technology

Linux · 81054476453640159149cb6704e834893e16736b to before 79ff751311e80fa0370007e46a79a6d601685e75, 81054476453640159149cb6704e834893e16736b to before 53141db979687eae7dc6d29414cefc77034f967e, 81054476453640159149cb6704e834893e16736b to before 68891125af5a5dfbca728809a16637a869bbe0df, 81054476453640159149cb6704e834893e16736b to before b2d6d873b4dfb5b84194061c4b40a1cd85b92ca4, 81054476453640159149cb6704e834893e16736b to before 77ea60f2d24002c308f224db44a4542c466489af, 81054476453640159149cb6704e834893e16736b to before 25419f516ea84b1e7d3d55aae5215ac86ece0c66, 81054476453640159149cb6704e834893e16736b to before 0ee697defc0594f1da810ed75d9d643fb46f5318, 81054476453640159149cb6704e834893e16736b to before 2db9bfa3e27bdea15e05ea70b56bad3d21e570ec
Linux

Linux · 4.11
Linux

Component: Not specified by the source
File: net/sctp/stream.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 20:21 UTC

Product: azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
CCR priority: 30.1 /100 (P4)
CVSS 3.1: 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS: 0.00501 · percentile 0.415 · 2026-10-15
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-89477.html