Get real-time updates on Telegram
CVE-2026-97535: Linux 4.16
CVE-2026-97535 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (Microsoft Security Response Center). EPSS 0.002 (percentile 0.08968), scored 06-Oct-2026. Fixed version: 7.2.7-1. Fixed version: 6.12.112-r0. Fixed version: 6.18.53-r0.
Affected technology
Linux · 2853192e154b813fe34a6cbee5e34dfef50d29d0 to before c80a0362a0fe548c15a0324b1f61c04b62bb2174, 2853192e154b813fe34a6cbee5e34dfef50d29d0 to before 48a44e19746eaa70320a3c2571dcb345192fca72, 2853192e154b813fe34a6cbee5e34dfef50d29d0 to before 13354ad251ab009102597a791bc7c4d2265229e1, 2853192e154b813fe34a6cbee5e34dfef50d29d0 to before 878613ecb5a36db26859c4fd83daf9283a334fa2
Linux
Linux · 4.16
Linux
Component: Not specified by the source
File: drivers/scsi/qla2xxx/qla_iocb.c, drivers/scsi/qla2xxx/qla_mid.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 31.3 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.002 · percentile 0.09058 · 2026-10-11
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-11 23:42:05.235979+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97535.html