CVE-2026-97581: Linux 5.14

CVE-2026-97581 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.8 (Microsoft Security Response Center). EPSS 0.002 (percentile 0.08899), scored 03-Oct-2026.

Affected technology

Linux · cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 6d192fc0d6faff25ecf6d52cbde4b939cb12c192, cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 2887a98c03d97a6fcb6c2dab92956f2f4c402cdd, cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 62ae24639d22909a5724627a0467e4bde9704020, cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 4f654c9bc954569ff9b8ab860b29480c4cf6f57b, cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8, cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 06236b094c899c22c12ac5097935eb6719293de8
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: drivers/media/platform/verisilicon/hantro_g2_hevc_dec.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 19-Oct-2026 10:36 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U · Microsoft Security Response Center
EPSS: 0.00205 · percentile 0.09854 · 2026-10-17
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-97581.html