Get real-time updates on Telegram
CVE-2026-92520: Linux 6.6
CVE-2026-92520 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.00206 (percentile 0.10133), scored 20-Oct-2026.
Affected technology
Linux · a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 to before a6090eeb289c5fa45f7b629befac2bd3c19a6dae, a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 to before 23b4bcc79bab5285275912b94e98c286f281de75, a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 to before 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3, a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 to before e2396b8a562073787e627a5f483f1bc5c452fa6a, a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 to before 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232, 40e34ea01748e5b8afdd40a172868be1e1ab0ede, 388c9d3eefaea99828ee5000c693128a5b41ee7c, acabf5df49aa3a4f9c96200102d893351b511a88, e388671635acf470f0986d874389148fd234620b, 232f0ba4d69263af5912e279fcc32fef2882b1dc, 5.4.258 to before 5.5, 5.10.198 to before 5.11, 5.15.134 to before 5.16, 6.1.56 to before 6.2, 6.5.6 to before 6.6
Linux
Linux · 6.6
Linux
Component: Not specified by the source
File: kernel/bpf/queue_stack_maps.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.00206 · percentile 0.10133 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-92520.html