Get real-time updates on Telegram
CVE-2026-89551: Linux 3.9
CVE-2026-89551 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 9.8 (msrc). EPSS 0.00514 (percentile 0.41753), scored 05-Oct-2026.
Affected technology
Linux · 4c190e2f913f038c9c91ee63b59cd037260ba353 to before a3d77bcd974b8625d16bddf448cb3a1b5e37049c, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before fa16bbe987b47e771e52eeb1b4540f18d92496ac, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before a924ac4c78afab71bf82641afa3b62e0c4a8b55e, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before 4bf59cb0ea5b0ddfbc46a1dc2fa78fc8b9986ce4, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before e6267cccd7b05cc514e57f2160aa8db85f5c2701, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before ad0cce80d4af2f74674e8b635d97aa3880e83da8, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before 85e9602650e9df07190abe817cee3b4d9bc3df17, 4c190e2f913f038c9c91ee63b59cd037260ba353 to before 3f491306dcb673ff5e78e1044ba450c58978774e
Linux
Linux · 3.9
Linux
Component: Not specified by the source
File: net/sunrpc/xdr.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00514 · percentile 0.4244 · 2026-10-15
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-16 09:43:43.583708+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89551.html