Get real-time updates on Telegram
CVE-2026-89777: Linux 4.20
CVE-2026-89777 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00164 (percentile 0.05311), scored 21-Oct-2026. Fixed version: eb84cd81040e58dd05ac190f561f2115e3367249. Fixed version: f0eea8f9013676b42289ec35941e848b8a543e19. Fixed version: d665a1688af7f8fefd7c0eb04f2a37122ce007f4. Fixed version: 25cdd2a492d868cff1e519a60fe282909c52d385. Fixed version: 812f1db7f0755a19ef16ecdc5cec51bcabc5eda5. Fixed version: 533d0c5feef85ee6404b9f41d5564fac6971a008. Fixed version: fda8fb7e8179561693a786a7af593f6b944a21c1.
Affected technology
Linux · 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before eb84cd81040e58dd05ac190f561f2115e3367249, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before f0eea8f9013676b42289ec35941e848b8a543e19, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before d665a1688af7f8fefd7c0eb04f2a37122ce007f4, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before 25cdd2a492d868cff1e519a60fe282909c52d385, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before 812f1db7f0755a19ef16ecdc5cec51bcabc5eda5, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before 533d0c5feef85ee6404b9f41d5564fac6971a008, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before fda8fb7e8179561693a786a7af593f6b944a21c1, 30ea32ab1951c80c6113f300fce2c70cd12659e4 to before dc77acfeb979dded39b247b60fef0399536bfa77, ac370e3d1f3b01519d2705cd5815d1c9d0a8812b, be363e27ec3c3a99793da2be6c07eafb95709c6b, f1b10ba5739440ca51d66f0b2949cead88d2dd02, dde3433de9a067a33d67d65b9093cad3e043e49e, 4.4.203 to before 4.5, 4.9.203 to before 4.10, 4.14.155 to before 4.15, 4.19.85 to before 4.20
Linux
Linux · 4.20
Linux
Component: Not specified by the source
Function: pointers
File: drivers/vfio/pci/vfio_pci_config.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00164 · percentile 0.05311 · 2026-10-21
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-22 01:10:55.718059+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
- OSV.dev · Source record · observed 2026-10-22 12:21:37.944032+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89777.html