Get real-time updates on Telegram
CVE-2026-89906: Linux 6.17
CVE-2026-89906 affects azl3 kernel 6.6.152.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00173 (percentile 0.06376), scored 20-Oct-2026.
Affected technology
Linux · 17c010fe45def335fe03a0718935416b04c7f349 to before 50fbc294e4e96246d60cd66f98acf043a362e3a0, f83d469e16bb1f75991ca67c56786fb2aaa42bea to before 89819868cde78cb2f748533785a46a3430873f20, cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 882b8912b7e92341fdb115ba0e2e5142a28684ff, cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 96f44d493c280ea161569c43d7ed0f3b0815803a, cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3 to before 37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8, 1a782fa32e644aa9fbae6c8488f3e61221ac96e1, f2b5e50cc04d7a049b385bc1c93b9cbf5f10c94f, 9262e3e04621558e875eb5afb5e726b648cd5949, 6.6.103 to before 6.6.160, 6.12.43 to before 6.12.114, 6.1.149 to before 6.2, 6.15.11 to before 6.16, 6.16.2 to before 6.17
Linux
Linux · 6.17
Linux
Component: Not specified by the source
File: arch/loongarch/net/bpf_jit.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00173 · percentile 0.06376 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89906.html