Get real-time updates on Telegram
CVE-2026-97555: Linux 5.12
CVE-2026-97555. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00524 (percentile 0.42467), scored 03-Oct-2026.
Affected technology
Linux · bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 to before d5cea6766ae1868a51c7d17d77d065b4f55c587f, bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 to before fb736ab4fb8c4fdb8b2f9ccd3a62e03d11549ca1, bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 to before 7fa84c9ca690643f429ae2709584a47e74b572c9, bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 to before 2a9aee9ef5622d58d8aafaa3263b3ffe70e2d9dd, bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 to before 0ee150794c75bcd0be0e24ff3394f433cbae18cc
Linux
Linux · 5.12
Linux
Component: Not specified by the source
File: fs/smb/client/cifsacl.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00524 · percentile 0.43233 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97555.html