Get real-time updates on Telegram
CVE-2026-97602: Linux 6.19
CVE-2026-97602. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00155 (percentile 0.04034), scored 03-Oct-2026.
Affected technology
Linux · 22ee4010866da81aeee08e1ea3fddbe418feb212 to before ff83367cda8eefbd62007ef1dff4f8104226d18a, 543555954b1ee8d1903a7020324efb41b0c97428 to before b9d77f1652e79e58eac48430d0431c329137efcc, c70df25214ac9b32b53e18e6ae3b8f073ffa6903 to before 7cb5f4643a7fcdbfbee1fad3cdfc678add62d378, 006a5035b495dec008805df249f92c22c89c3d2e to before bf3d6c44c84c57e8a4bb7f40ad95b64f9b0198ba, 006a5035b495dec008805df249f92c22c89c3d2e to before b824476c56a153934c67c9e0f873e1fd967743d6, 6.6.143 to before 6.6.158, 6.12.93 to before 6.12.111, 6.18.3 to before 6.18.53
Linux
Linux · 6.19
Linux
Component: Not specified by the source
File: net/ipv4/inet_fragment.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could gain higher privileges under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- Product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00155 · percentile 0.04224 · 2026-10-17
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-97602.html