CVSS 3.1 base metricsRed raises the risk · green lowers it
Attack vector
LocalAV:L
Attack complexity
HighAC:H
Privileges required
LowPR:L
User interaction
NoneUI:N
Scope
ChangedS:C
Confidentiality
HighC:H
Integrity
HighI:H
Availability
HighA:H
Updates that fix it
0 KBs
No KB listed
No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.
Affected products
Open Source Software
3 affected products
azl3 kernel 6.6.161.1-1 on Azure Linux 3.0
azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0
azl4 kernel 6.18.57-1.7.azl4 on Azure Linux 4.0
What changed
Affected products: azl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0 → azl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0, azl4 kernel 6.18.57-1.7.azl4 on Azure Linux 4.0
Affected products: azl3 kernel 6.6.161.1-1 on Azure Linux 3.0 → azl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0 · CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H → CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H · CVSS score: 6.0 → 7.8 · Severity: Moderate → Important
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
15 Nov 2026 · 08:08:43 UTCAffected productsazl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0 → azl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0, azl4 kernel 6.18.57-1.7.azl4 on Azure Linux 4.0
14 Nov 2026 · 08:16:23 UTCAffected productsazl3 kernel 6.6.161.1-1 on Azure Linux 3.0 → azl3 kernel 6.6.161.1-1 on Azure Linux 3.0, azl4 kernel 6.18.57-1.6.azl4 on Azure Linux 4.0
14 Nov 2026 · 08:16:23 UTCCVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H → CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA KEV lists vulnerabilities known to be exploited. FIRST EPSS estimates the likelihood of exploitation in the next 30 days. An unavailable score does not mean zero risk.
Which CVEs have scores here?
This view includes predictions for CVE identifiers explicitly listed in public NuGet advisories. Microsoft release pages have their own prediction coverage. Check source status for the scope and latest checks.
No exploitation or prediction data is available here for these CVEs. This does not mean they are safe or unlikely to be exploited.
cve-program · CVE-2026-100081
Published
xen-netback: defer xenvif_mcast_addr_list_free()
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: defer xenvif_mcast_addr_list_free()
In order for the function to legitimately avoid locking/RCU, it needs to
run after all TX/RX processing has finished/stopped: Lookups happen from
xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action()
(called out of xenvif_poll()).
Move the call out of xenvif_disconnect_data() (the call to the function
from connect()'s error path doesn't require any cleaning up there), and
put it past the synchronization point in backend_disconnect().
This is XSA-527 / CVE-2026-100081.
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.