Get real-time updates on Telegram
CVE-2026-97415: Linux 4.18
CVE-2026-97415 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 6.3 (HIGH, Microsoft Security Response Center). EPSS 0.00131 (percentile 0.02698), scored 25-Oct-2026. Fixed version: 1370badf6b823ce3cde39a65f46f9e5dc7b4bf43. Fixed version: ba6c4fc662853f6662e4db060cf88ee994053e21. Fixed version: 9154542070ca7eadb3c764a882f39a127677854b. Fixed version: 74f577c722c99248d804eca18e7de7c5e47549d7. Fixed version: 0af37c217edf15fa21dac1c40822086df356c6bb. Fixed version: 6.1.189. Fixed version: 6.6.158. Fixed version: 6.12.111. Fixed version: 6.18.53.
Affected technology
Linux · b64ec075bded2b30bcd90af5aa5256d2237c885d to before 1370badf6b823ce3cde39a65f46f9e5dc7b4bf43, b64ec075bded2b30bcd90af5aa5256d2237c885d to before ba6c4fc662853f6662e4db060cf88ee994053e21, b64ec075bded2b30bcd90af5aa5256d2237c885d to before 9154542070ca7eadb3c764a882f39a127677854b, b64ec075bded2b30bcd90af5aa5256d2237c885d to before 74f577c722c99248d804eca18e7de7c5e47549d7, b64ec075bded2b30bcd90af5aa5256d2237c885d to before 0af37c217edf15fa21dac1c40822086df356c6bb
Linux
Linux · 4.18
Linux
Component: Not specified by the source
File: fs/btrfs/ioctl.c, fs/btrfs/tree-checker.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 25.2 /100 (P4)
- CVSS 3.1
- 6.3 /10 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H · Microsoft Security Response Center
- EPSS
- 0.00131 · percentile 0.02698 · 2026-10-25
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-25 19:52:47.952465+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
- OSV.dev · Source record · observed 2026-10-25 21:45:52.076210+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97415.html