CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-90264: Linux 7.2

CVE-2026-90264 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00206 (percentile 0.10129), scored 20-Oct-2026.

Affected technology

Linux · 097b159d43407b4ea0e5d14ae58a3bbfa5865a24 to before 043b6fd9706e4335851f317352d2717ad40e6d83, ccd5c23122b01de646c80485e2fadac82d1aab62 to before de8f5cb3cb611f96909797b4b017831f5141cbbe, c3a3d3986719026c85950bfa6f41a251fc46e16f to before 58ce50b1802a446d3b26df1b9c58be1ab8913d0e, ff66fe6662330226b3f486014c375538d91c44aa to before aaac9b352f7f53f5d2f7e58e612d67d2a2bf7094, ff66fe6662330226b3f486014c375538d91c44aa to before ec78575dde998c21be7e0cb2503b5620f34b6255, 4b5875cbb85dbf4d11385eb0a7a589c086d76d42, 10b1abc1d0c8ae25c2b9ac465515717c68ffff05, b8df7f486a4617d3096b8fa27148cfa54b1d6a8d, 6.6.145 to before 6.6.160, 6.12.97 to before 6.12.114, 6.18.40 to before 6.18.52, 5.15.212 to before 5.16, 6.1.178 to before 6.2, 7.1.4 to before 7.2
Linux

Linux · 7.2
Linux

Component: Not specified by the source
Function: during, runtime
File: fs/btrfs/file.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
CCR priority
22.1 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U · Microsoft Security Response Center
EPSS
0.00206 · percentile 0.10129 · 2026-10-20
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-90264.html