Get real-time updates on Telegram
CVE-2026-89726: Linux 2.6.12
CVE-2026-89726 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 4.4 (Microsoft Security Response Center). EPSS 0.00177 (percentile 0.06918), scored 24-Oct-2026. Fixed version: 04ae68af4107600120c3c41c94268f43bc350d48. Fixed version: 2e5a70a175f0c74e7238b013a96c4eabc3002934. Fixed version: 3ada20e110bf3245edb0a3bcddadc33d0f142f8d. Fixed version: 60c74f42f5abddb85dd919b4448d5474e65dbe76. Fixed version: 709eb41adaf78d59d4579a13a898125919b69bcc. Fixed version: 7d658da725ea81c91f73087547b97e7ced82d62b. Fixed version: 1b0dc3cbb8630f0b5cb34d848628225920a904be.
Affected technology
Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 04ae68af4107600120c3c41c94268f43bc350d48, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2e5a70a175f0c74e7238b013a96c4eabc3002934, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3ada20e110bf3245edb0a3bcddadc33d0f142f8d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60c74f42f5abddb85dd919b4448d5474e65dbe76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 709eb41adaf78d59d4579a13a898125919b69bcc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d658da725ea81c91f73087547b97e7ced82d62b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b0dc3cbb8630f0b5cb34d848628225920a904be, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cec0d03fe785380540dc1b4d07c80f67ae2ffc78
Linux
Linux · 2.6.12
Linux
Component: Not specified by the source
File: lib/ucs2_string.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as low; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 17.6 /100 (P5)
- CVSS 3.1
- 4.4 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L · Microsoft Security Response Center
- EPSS
- 0.00177 · percentile 0.06918 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
- OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89726.html