CVE-2026-93820: Linux 4.12

CVE-2026-93820 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 6.4 (Microsoft Security Response Center). EPSS 0.00173 (percentile 0.06332), scored 24-Oct-2026. Fixed version: 025308e7c9cd10112b73558c9f63f8f7285fa726. Fixed version: ac47d42901859edb504a2890a3a5709c86dbc0c3. Fixed version: eaeb9bed3641741aceb0add84a97023bed61e748. Fixed version: 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652. Fixed version: ebca7e5947720e9d4bd918af3e17720270c50744. Fixed version: 9b19201f57d87c4d0777621275dbc59bff41b7f2. Fixed version: 0bd9611587bb494c33566d825fe34b2705e4b167. Fixed version: 5.10.271. Fixed version: 5.15.222.

Affected technology

Linux · 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 025308e7c9cd10112b73558c9f63f8f7285fa726, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before ac47d42901859edb504a2890a3a5709c86dbc0c3, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before eaeb9bed3641741aceb0add84a97023bed61e748, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 5d566ac3a055f0a6f4890ff0af7cfd7e8ed89652, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before ebca7e5947720e9d4bd918af3e17720270c50744, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 9b19201f57d87c4d0777621275dbc59bff41b7f2, 073d3dbe9a7c38888d8dafe09df421b174a6cffa to before 0bd9611587bb494c33566d825fe34b2705e4b167
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/pci/controller/pcie-rockchip-host.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

A local attacker with high privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

Published 25-Oct-2026 10:20 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 25.6 /100 (P4)
CVSS 3.1: 6.4 /10 · CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · Microsoft Security Response Center
EPSS: 0.00173 · percentile 0.06332 · 2026-10-24
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-93820.html