Get real-time updates on Telegram
CVE-2026-90264: Linux 7.2
CVE-2026-90264 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00206 (percentile 0.10129), scored 20-Oct-2026.
Affected technology
Linux · 097b159d43407b4ea0e5d14ae58a3bbfa5865a24 to before 043b6fd9706e4335851f317352d2717ad40e6d83, ccd5c23122b01de646c80485e2fadac82d1aab62 to before de8f5cb3cb611f96909797b4b017831f5141cbbe, c3a3d3986719026c85950bfa6f41a251fc46e16f to before 58ce50b1802a446d3b26df1b9c58be1ab8913d0e, ff66fe6662330226b3f486014c375538d91c44aa to before aaac9b352f7f53f5d2f7e58e612d67d2a2bf7094, ff66fe6662330226b3f486014c375538d91c44aa to before ec78575dde998c21be7e0cb2503b5620f34b6255, 4b5875cbb85dbf4d11385eb0a7a589c086d76d42, 10b1abc1d0c8ae25c2b9ac465515717c68ffff05, b8df7f486a4617d3096b8fa27148cfa54b1d6a8d, 6.6.145 to before 6.6.160, 6.12.97 to before 6.12.114, 6.18.40 to before 6.18.52, 5.15.212 to before 5.16, 6.1.178 to before 6.2, 7.1.4 to before 7.2
Linux
Linux · 7.2
Linux
Component: Not specified by the source
Function: during, runtime
File: fs/btrfs/file.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.00206 · percentile 0.10129 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90264.html