Get real-time updates on Telegram
CVE-2026-89638: Linux 2.6.24
CVE-2026-89638 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.0017 (percentile 0.05928), scored 14-Oct-2026.
Affected technology
Linux · d32c4f2626acc385d5187bd5c0c24f442328dc60 to before 58b23fc9fb580432470d6c5da3c1e5660dba9fbc, d32c4f2626acc385d5187bd5c0c24f442328dc60 to before b10015807e4c628095d1d1d1c9307efc8cdd9e1b, d32c4f2626acc385d5187bd5c0c24f442328dc60 to before 69bfe810ecd1e0387d8975d711cd326341d13c6e, d32c4f2626acc385d5187bd5c0c24f442328dc60 to before b8e5dc4f95e5484159b343903f302eb6d783f2e6
Linux
Linux · 2.6.24
Linux
Component: Not specified by the source
Function: is
File: fs/smb/client/inode.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0017 · percentile 0.05928 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89638.html