CVE-2026-93822: Linux 4.1

CVE-2026-93822 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 4.1 (Microsoft Security Response Center). EPSS 0.00173 (percentile 0.0633), scored 24-Oct-2026. Fixed version: e7d9d7be2c1f8d434032983bc86a05805178c9c9. Fixed version: 1618e374ba4c7117c04662422ef985e9d64e2466. Fixed version: 4e1d34d824050a4e700ca442f815a95d9f214b83. Fixed version: aaf4153caed9f1760b9f266612b0599bfd97150c. Fixed version: bd2bf1e0d973c93fc1637b90cbb9a5a5f6884bd3. Fixed version: ee06aafc2d760a4ee023e0b2e95ce1ec71bddc6c. Fixed version: a6a64e150f12ad5391e0a0d60f6a3d119b06ce50. Fixed version: 5.10.271. Fixed version: 5.15.222.

Affected technology

Linux · 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before e7d9d7be2c1f8d434032983bc86a05805178c9c9, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before 1618e374ba4c7117c04662422ef985e9d64e2466, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before 4e1d34d824050a4e700ca442f815a95d9f214b83, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before aaf4153caed9f1760b9f266612b0599bfd97150c, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before bd2bf1e0d973c93fc1637b90cbb9a5a5f6884bd3, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before ee06aafc2d760a4ee023e0b2e95ce1ec71bddc6c, 1fb37a8178da007cad75f48e2355b9dcb0711e06 to before a6a64e150f12ad5391e0a0d60f6a3d119b06ce50
Linux

Linux · 4.1
Linux

Component: Not specified by the source
File: drivers/pci/controller/pcie-iproc.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

A local attacker with high privileges could trigger a use-after-free error. Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not state a further attacker outcome.

Published 25-Oct-2026 10:20 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 16.4 /100 (P5)
CVSS 3.1: 4.1 /10 · CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H · Microsoft Security Response Center
EPSS: 0.00173 · percentile 0.0633 · 2026-10-24
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-93822.html