Get real-time updates on Telegram
CVE-2026-92489: Linux 6.14
CVE-2026-92489 affects azl3 kernel 6.6.152.1-1 on Azure Linux 3.0. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00457 (percentile 0.3823), scored 17-Oct-2026.
Affected technology
Linux · bfb9b9404a53a72524ce695551755117e9d3deb0 to before 621871b696b108026bf4b44ed4085ffa2102f417, a0395e96831adee8ffa016bf958e4dce9ece656e to before bc9297796bfdcc8d9609236e54519a4f38737aac, 5eddd76ec2fd1988f0a3450fde9730b10dd22992 to before 02deb637e965950148752a304dd1471212dd6470, 5eddd76ec2fd1988f0a3450fde9730b10dd22992 to before 56a347950e661c1a7f8f31c43a2ea53c2323b6f4, 5eddd76ec2fd1988f0a3450fde9730b10dd22992 to before 2aed51fc58d9ce450e2c116efb956160fd06fa02, d1d673a5bede3767252cff19c0ab1e5387c6f43f, 6.6.85 to before 6.6.157, 6.12.21 to before 6.12.110, 6.13.9 to before 6.14
Linux
Linux · 6.14
Linux
Component: Not specified by the source
File: net/xfrm/xfrm_output.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00457 · percentile 0.3823 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-92489.html