CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-89542: Linux 2.6.35

CVE-2026-89542 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42439), scored 15-Oct-2026.

Affected technology

Linux · de9c17eb4a912c9028f7b470eb80815144883b26 to before 299d281c7225ded15b28cb861a98d818d82787fc, de9c17eb4a912c9028f7b470eb80815144883b26 to before 84ddbc8d084c0251d534f14f5d1a7da05be56404, de9c17eb4a912c9028f7b470eb80815144883b26 to before 075d7cfc4df8c54cb202ba8b28420370c03ba9b6, de9c17eb4a912c9028f7b470eb80815144883b26 to before f2591660e0eb263c9415bf0d0bb1b111e62df7a4, de9c17eb4a912c9028f7b470eb80815144883b26 to before dddcb0f4b7e27fac16a78ea9a1c8ec2e8a241087, de9c17eb4a912c9028f7b470eb80815144883b26 to before 806584a4b67a7233870c33e5b8f872e76dd02988, de9c17eb4a912c9028f7b470eb80815144883b26 to before a7894e10572d53eb10109b8d07459cc8d3435811, de9c17eb4a912c9028f7b470eb80815144883b26 to before 6959297aaa9572783d620a226d73c3fb94494888
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
File: net/sunrpc/auth_gss/gss_krb5_wrap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
CCR priority
39.3 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00514 · percentile 0.42439 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-89542.html