Get real-time updates on Telegram
CVE-2026-89487: Linux 3.14
CVE-2026-89487 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00129 (percentile 0.02261), scored 15-Oct-2026.
Affected technology
Linux · 36d5fe6a000790f56039afe26834265db0a3ad4c to before 5de5d554141a15b3f1f5c978fd9f7f4fd6d0600a, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 48db11e115d1b232edc5591604adc6eda95cd545, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 4477222e2916a18e273edc139c955ade6bbb7a69, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 4d5c460ef8754be1d43b16dbf02695b008b207d6, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 6767d70cf46f65807a6a4c4406a518e6c12e36ae, 36d5fe6a000790f56039afe26834265db0a3ad4c to before e41a59fc056f63a7a1f42788913c53cc48d744aa, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 5d85eef222cfd28e73deed7402c100229e8b9e6e, 36d5fe6a000790f56039afe26834265db0a3ad4c to before 0dbc2398fca3bb33eda963849f865ddb1b3aa05e, c5f0c0e7525443add533495e93ba8de6feab2396, 1674b4bf3eea3cac51b70778e89f8025f7cfe695, 3.10.51 to before 3.11, 3.12.40 to before 3.13
Linux
Linux · 3.14
Linux
Component: Not specified by the source
File: net/openvswitch/datapath.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00129 · percentile 0.02261 · 2026-10-15
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89487.html