CVE-2026-97907: Linux 6.4

CVE-2026-97907 affects azl3 kernel 6.6.157.1-1 on Azure Linux 3.0. CVSS 3.1 base score 7.1 (Microsoft Security Response Center). EPSS 0.002 (percentile 0.08896), scored 03-Oct-2026.

Affected technology

Linux · 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa to before ba96047bba4a6101267cf4f6b3057cbc58e6c554, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa to before 90f3a142b5f8596a565b8e080d18a8050be6edef, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa to before 422f6547259654bae690713614c794dd1e2c0a0b, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa to before c4249cf6e80b1bd62a6a409aaabe760fe025dac3, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa to before 83e3e515fd261600ed8491fb0a8bcdfb115c904e
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: drivers/bluetooth/btrtl.c

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 19-Oct-2026 10:37 UTC

Product: azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
CCR priority: 28.4 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U · Microsoft Security Response Center
EPSS: 0.002 · percentile 0.09169 · 2026-10-17
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-18 12:55:59.341568+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-97907.html