Get real-time updates on Telegram
CVE-2026-93801: Linux 6.18
CVE-2026-93801 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.0 (HIGH, Source advisory). EPSS 0.0012 (percentile 0.01706), scored 20-Oct-2026.
Affected technology
Linux · 436cfdbc57d98808fce427d9a8d97691374989b3 to before 2c5db82778f560121efda9e052e2f19c2d807c1b, fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 to before 74ff47e6c4213fcfeba2de448d9cbda200507d22, 057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 22532dd88694ed20bdd47523ffa709f166ce776b, 057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 8fce4cf4369c766a3293a05419500cbfde72e60d, 83d3bc866530a36a465b47cce4d2a9def2411960, 6.6.113 to before 6.6.160, 6.12.54 to before 6.12.111, 6.17.4 to before 6.18
Linux
Linux · 6.18
Linux
Component: Not specified by the source
File: fs/smb/client/link.c, fs/smb/client/smb1ops.c, fs/smb/client/smb2ops.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 28.0 /100 (P4)
- CVSS 3.1
- 7.0 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0012 · percentile 0.01706 · 2026-10-20
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-21 16:14:50.830645+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-21 16:09:05.633125+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-93801.html