Get real-time updates on Telegram
CVE-2026-97556: Linux 6.5
CVE-2026-97556 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.1 (Microsoft Security Response Center). EPSS 0.00205 (percentile 0.09537), scored 04-Oct-2026.
Affected technology
Linux · 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7 to before 55c5f095d4df14271b238f826e1392fda7b6e60e, e8f5f849ffce24490eb9449e98312b66c0dba76f to before e9c5bcc88b8337157e480c85a6d2f326bc265012, e8f5f849ffce24490eb9449e98312b66c0dba76f to before 9ec991e148368e3207e98134c509a625097f7693, e8f5f849ffce24490eb9449e98312b66c0dba76f to before dd03fd658ea59821505e0e643b6b7cbdf51c4e1d, e8f5f849ffce24490eb9449e98312b66c0dba76f to before 1d1b0f1d812a4011a57bc6c70492c34a2e46c6dd, e8f5f849ffce24490eb9449e98312b66c0dba76f to before 23b26f4408ac3f35a482d2e5cf6fc865d4201b71, b99f490ea87ebcca3a429fd8837067feb56a4c7c, 6b67a6d2e50634fe127e656147c81915955e9f5e, 6.1.47 to before 6.1.189, 5.15.128 to before 5.16, 6.4.12 to before 6.5
Linux
Linux · 6.5
Linux
Component: Not specified by the source
File: fs/smb/client/file.c
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U · Microsoft Security Response Center
- EPSS
- 0.00205 · percentile 0.09853 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97556.html