CVE-2026-97540: Linux 2.6.16

CVE-2026-97540 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.1 (Microsoft Security Response Center). EPSS 0.00205 (percentile 0.09538), scored 04-Oct-2026.

Affected technology

Linux · 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before 7c940a1100cb0aa18a54dc48d736c0525c0f400c, 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before 05d47f540d85c8f6697ec5cfc1aa7b4f96a5b31b, 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before 9425a13960ef38bac237608f25c9ee64ff113086, 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before 7654812b65047349ea4c111eed42c4315a00e462, 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before 61b84e964a829d534f24eab4cbd4035d22b52601, 733260ff9c45bd4db60f45d17e8560a4a68dff4d to before ce8101c331956bbd3e20681331dfd22eb7c1c1ea
Linux

Linux · 2.6.16
Linux

Component: Not specified by the source
File: drivers/net/usb/pegasus.c, drivers/net/usb/pegasus.h

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 19-Oct-2026 10:36 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 28.5 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U · Microsoft Security Response Center
EPSS: 0.00205 · percentile 0.09859 · 2026-10-17
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-97540.html