P4Verified

CVE-2026-89956: Linux 6.0

CVE-2026-89956 affects azl3 kernel 6.6.152.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (Microsoft Security Response Center). EPSS 0.00209 (percentile 0.10062), scored 06-Oct-2026. Fixed version: 7.2.6-1. Fixed version: 6.12.112-r0. Fixed version: 6.18.53-r0.

Affected technology

Linux · 2c1ee8983aa377fef4f725162f4f3aa5f9575d4a to before 530ee1cc71562b6799b9ece187b6c1b757a2c6fa, 2c1ee8983aa377fef4f725162f4f3aa5f9575d4a to before 647916988272fe5ecb4bb30cd02b51af9960618a, 2c1ee8983aa377fef4f725162f4f3aa5f9575d4a to before 0fd74477d05743d4cd9b25a3b667daa278d53b93, 2c1ee8983aa377fef4f725162f4f3aa5f9575d4a to before 7fa61c29850d05e40ca9ed41bfdf57673023f581
Linux

Linux · 6.0
Linux

Component: Not specified by the source
Function: uses, that, which
File: drivers/s390/crypto/vfio_ap_ops.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 12-Oct-2026 00:35 UTC

Product: azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U · Microsoft Security Response Center
EPSS: 0.00209 · percentile 0.10207 · 2026-10-11
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-11 23:42:05.235979+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-89956.html