CVE-2026-93287: Linux 2.6.33

CVE-2026-93287 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 6.6 (HIGH, Microsoft Security Response Center). EPSS 0.00129 (percentile 0.02311), scored 24-Oct-2026. Fixed version: 856dffcc097b3d8ed45a643ebda07cb92968cb33. Fixed version: 356875e33f2c6d2061a02c9dec1a1e639d265a55. Fixed version: 72ca5e0b8b7a62615758f8871c34d61616c2dc8b. Fixed version: df077253f6405d67ad087538e495ef32a05717b7. Fixed version: f09edffba97d37b1fdff5f818a9a45f8a98ac171. Fixed version: c4b478bc50b7ca9865e237909941253a0f7111a2. Fixed version: 3051cd060fa496df42954291fa2306ed2eab4ecc. Fixed version: 5.10.271.

Affected technology

Linux · 4710317891e4824ce1510a6b5066abbd3e917750 to before 856dffcc097b3d8ed45a643ebda07cb92968cb33, 4710317891e4824ce1510a6b5066abbd3e917750 to before 356875e33f2c6d2061a02c9dec1a1e639d265a55, 4710317891e4824ce1510a6b5066abbd3e917750 to before 72ca5e0b8b7a62615758f8871c34d61616c2dc8b, 4710317891e4824ce1510a6b5066abbd3e917750 to before df077253f6405d67ad087538e495ef32a05717b7, 4710317891e4824ce1510a6b5066abbd3e917750 to before f09edffba97d37b1fdff5f818a9a45f8a98ac171, 4710317891e4824ce1510a6b5066abbd3e917750 to before c4b478bc50b7ca9865e237909941253a0f7111a2, 4710317891e4824ce1510a6b5066abbd3e917750 to before 3051cd060fa496df42954291fa2306ed2eab4ecc
Linux

Linux · 2.6.33
Linux

Component: Not specified by the source
File: drivers/i2c/i2c-core-smbus.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 25-Oct-2026 10:20 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 26.4 /100 (P4)
CVSS 3.1: 6.6 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H · Microsoft Security Response Center
EPSS: 0.00129 · percentile 0.02311 · 2026-10-24
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-93287.html