Get real-time updates on Telegram
CVE-2026-89482: Linux 5.7
CVE-2026-89482 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00714 (percentile 0.52687), scored 15-Oct-2026.
Affected technology
Linux · 25e5cb780e62bde432b401f312bb847edc78b432 to before 32ea8ce96b9bd797c59c351ce490ffd97adaa8c0, 25e5cb780e62bde432b401f312bb847edc78b432 to before dd8906bb8f8d5bf1c9f861e1382c82b87bfe7cab, 25e5cb780e62bde432b401f312bb847edc78b432 to before 7ed0b61bbc145988be292c4d3ec580aebd8d2bcd, 25e5cb780e62bde432b401f312bb847edc78b432 to before b96e1ff75e5c0ad6e077ac002b1d30b0a2b49528, 25e5cb780e62bde432b401f312bb847edc78b432 to before b36161701cb366f416afdcf70771d432a7c74753, 25e5cb780e62bde432b401f312bb847edc78b432 to before 6a01b58263108eaf9869bb6f82f07709240c6589, 25e5cb780e62bde432b401f312bb847edc78b432 to before 641ad3a30ba560f0a9a610376c568d7b75d2a2aa, 25e5cb780e62bde432b401f312bb847edc78b432 to before 3a4aa9e6ad3e35f8e24d5eaf38ee4d437075fb36, f507ae6e33cbe56c4e3fe000434fc0ecc263d098, b1458c16f4e26e87492e58e4d24a1873bd09232a, 5.4.36 to before 5.5, 5.6.8 to before 5.7
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: drivers/nvme/host/tcp.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 39.4 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00714 · percentile 0.52687 · 2026-10-15
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89482.html