Get real-time updates on Telegram
CVE-2026-97524: Linux 6.12
CVE-2026-97524. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00603 (percentile 0.47009), scored 03-Oct-2026.
Affected technology
Linux · fde99e972b8f88cebe619241d7aa43d288ef666a to before 6d669c740933124eae3df8cfc15995af9bcc6aba, 12c1676d598e3b8dd92a033b623b792cc2ea1ec5 to before 83a7dcdd2b1060484528da70a643125174d47e5a, 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25 to before a370e56024df0b07e3120c45a9773ae123819fd6, b8be15d1ae7ea4eedd547c3b3141f592fbddcd30 to before 1962841387087970d75ba8b8d4c2aa2d45705e50, e32d262c89e2b22cb0640223f953b548617ed8a6 to before 4b7abdcb5ba832fafab679f0d998af39cbc99307, e32d262c89e2b22cb0640223f953b548617ed8a6 to before b2dbcc1ed48b5ac070a41db4a52aade6823c4df0, e32d262c89e2b22cb0640223f953b548617ed8a6 to before ce7e4ede01ed3e47a48c0f1ce1d87bf4864bee9f, e32d262c89e2b22cb0640223f953b548617ed8a6 to before 2b0f561f21b27c40c91ea4975268a06092bd7e9c, 8bfd391bde685df7289b928ce8876a3583be4bfb, 5.10.228 to before 5.10.271, 5.15.169 to before 5.15.222, 6.1.113 to before 6.1.189, 6.6.57 to before 6.6.158, 6.11.4 to before 6.12
Linux
Linux · 6.12
Linux
Component: Not specified by the source
File: net/mptcp/protocol.c, net/mptcp/protocol.h, net/mptcp/subflow.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 30.2 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00686 · percentile 0.51701 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97524.html