Get real-time updates on Telegram
CVE-2026-89538: azl3 kernel 6.6.152.1-1 on Azure Linux 3.0 (exact versions not specified); +2 more affected products
CVE-2026-89538 affects azl3 kernel 6.6.152.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.3 (Microsoft Security Response Center). EPSS 0.00714 (percentile 0.52443), scored 13-Oct-2026. Fixed version: ac9efc29346b6942e71f0e24a3178a9121330fab. Fixed version: b5746095b59f4d11f39f08751d36bbdfd1e5deac. Fixed version: 9fc6d6e6db49ab55208d5dd1c424c1d0d9aa7296. Fixed version: 4abb44a29bb515df6f49123848765c70fc9b5021. Fixed version: dfcd81ab45613d45996fbf483d4ef54b0ec90ab9. Fixed version: 1f9856af065b6158271687e9788407b9573fd16f. Fixed version: 880effc943ed82d6811f272ed3307c222b40f4d6.
Affected technology
azl3 kernel 6.6.152.1-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
azl3 kernel 6.6.150.1-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Kernel · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
- CCR priority
- 21.4 /100 (P4)
- CVSS 3.1
- 5.3 /10 · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · Microsoft Security Response Center
- EPSS
- 0.00714 · percentile 0.52443 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- OSV.dev · Source record · observed 2026-10-14 16:28:58.499616+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89538.html