Get real-time updates on Telegram
CVE-2026-93150: Linux 6.5
CVE-2026-93150 affects azl3 kernel 6.6.150.1-1 on Azure Linux 3.0. CVSS 3.1 base score 5.5 (Microsoft Security Response Center). EPSS 0.002 (percentile 0.0924), scored 20-Oct-2026.
Affected technology
Linux · 6c24849f5515e4966d94fa5279bdff4acf2e9489 to before 642648fa7595241e4d491add5007bc33f11defb5, 6c24849f5515e4966d94fa5279bdff4acf2e9489 to before e422b32e6a57269ca8164c60674a78bee85cf5fb, 6c24849f5515e4966d94fa5279bdff4acf2e9489 to before e5965ae3f7c918151b87e5c925b7978afbeaf638, 6c24849f5515e4966d94fa5279bdff4acf2e9489 to before 78d9daf5e13ad1448b7dfebac949936710ec7565, 6c24849f5515e4966d94fa5279bdff4acf2e9489 to before 95220e1f18f6321008f021abc7d6f581f64bcb82, 5ac05ce5684315d0e71194a63febaf33921c3268, 43d8cbfefa7c59bd3b5fe184535eca476d45304e, d1b4262b78cc7638642833252ae92fc586854ffb, 74fac5bb0d375d6b8f5e7997925063c509089c9c, 5.10.193 to before 5.11, 5.15.129 to before 5.16, 6.1.50 to before 6.2, 6.4.13 to before 6.5
Linux
Linux · 6.5
Linux
Component: Not specified by the source
File: kernel/cgroup/cpuset-internal.h, kernel/cgroup/cpuset.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.150.1-1 on Azure Linux 3.0
- CCR priority
- 22.1 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.002 · percentile 0.0924 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-93150.html