Get real-time updates on Telegram
CVE-2026-89625: Linux 5.11
CVE-2026-89625 affects azl3 kernel 6.6.152.1-1 on Azure Linux 3.0. CVSS 3.1 base score 6.4 (Microsoft Security Response Center). EPSS 0.00209 (percentile 0.10466), scored 20-Oct-2026.
Affected technology
Linux · cc894ac553605c9193a7a94372ff2f8af5766f46 to before 56ef23198bdd51644372b1a9917802544b30987a, cc894ac553605c9193a7a94372ff2f8af5766f46 to before 0e3d42ef008f0931e3878b4f1b046b6e45a95bde, cc894ac553605c9193a7a94372ff2f8af5766f46 to before 114a58640aaf3c2eb97b5b01c75ab5e541d15d9c, cc894ac553605c9193a7a94372ff2f8af5766f46 to before 3155dc327344d286f17345cd371be05e255a4328, cc894ac553605c9193a7a94372ff2f8af5766f46 to before a26705bd2e2728833e7a538ce91e58a5eeff496a
Linux
Linux · 5.11
Linux
Component: Not specified by the source
File: drivers/hid/hid-sony.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
- CCR priority
- 25.7 /100 (P4)
- CVSS 3.1
- 6.4 /10 · CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · Microsoft Security Response Center
- EPSS
- 0.00209 · percentile 0.10466 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89625.html