CVE-2026-93785: Linux 3.2

CVE-2026-93785 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 2.3 (Microsoft Security Response Center). EPSS 0.00173 (percentile 0.06612), scored 25-Oct-2026. Fixed version: eeac976b74b4f697cfc517187b7cbfd72652dbbc. Fixed version: 125b05ac8ca8758950e4369c1542d57a162f504c. Fixed version: 945f6cde6bcf8f08f6fa5df8882b1b9582e55efa. Fixed version: 3a4a34a732e8a08309eed0a74314dbd9f2f1c972. Fixed version: 6cfeef221ac00d63c07f6122f58e6159bde69ca0. Fixed version: 8b12f65d7caf16d124098cb4895a203367d35b57. Fixed version: 455488cd5054bcc59db40fa1cc2c004031a5b2a5. Fixed version: 5.10.271. Fixed version: 5.15.222.

Affected technology

Linux · 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before eeac976b74b4f697cfc517187b7cbfd72652dbbc, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 125b05ac8ca8758950e4369c1542d57a162f504c, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 945f6cde6bcf8f08f6fa5df8882b1b9582e55efa, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 3a4a34a732e8a08309eed0a74314dbd9f2f1c972, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 6cfeef221ac00d63c07f6122f58e6159bde69ca0, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 8b12f65d7caf16d124098cb4895a203367d35b57, 21fed0d5b763b94a7d1568c27d0cce892ab8d43e to before 455488cd5054bcc59db40fa1cc2c004031a5b2a5
Linux

Linux · 3.2
Linux

Component: Not specified by the source
File: fs/smb/client/cifsacl.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 26-Oct-2026 06:07 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 9.2 /100 (P5)
CVSS 3.1: 2.3 /10 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L · Microsoft Security Response Center
EPSS: 0.00173 · percentile 0.06612 · 2026-10-25
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-25 19:52:47.952465+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-25 21:45:52.076210+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-93785.html