Assessment
- Severity
- Moderate
- CVSS base score
- 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U
- Impact
- Not stated
- EPSS, next 30 days
- Not scored yet
- Public exploit code
- No Nuclei template lists it
- Exploitability
- Not assessed
- Publicly disclosed
- No
- Customer action
- Required: apply the update
- Component
- Mariner
- Weakness
- —
- Issued by
- Linux
- Last revised
- 24 Oct 2026
CVSS 3.1 base metricsRed raises the risk · green lowers it
- Attack vector
- LocalAV:L
- Attack complexity
- HighAC:H
- Privileges required
- LowPR:L
- User interaction
- NoneUI:N
- Scope
- UnchangedS:U
- Confidentiality
- NoneC:N
- Integrity
- NoneI:N
- Availability
- HighA:H
Updates that fix it
0 KBsNo KB listed
MSRC lists no downloadable update, which usually means a service-side fix or a release-notes update. Check the MSRC advisory.
Affected products
1 affected product
- azl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this versionField-level log (0)
Up to 100 recent field edits are shown; older edits may be outside retention.
No retained field changes for this selection.
Explore global source statements, affected packages and advisory history for CVE-2026-98903. The catalog has a separate collection scope from Microsoft release records.
cve-program · CVE-2026-98903
PublishedLinux
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/mailbox/imx-mailbox.c"
],
"versions": [
{
"version": "0a67003b1985c79811160af1b01aca07cd5fbc53",
"lessThan": "02273054b2e94e53065ea5644265bb9d8f7ee2a7",
"status": "affected",
"versionType": "git"
},
{
"version": "0a67003b1985c79811160af1b01aca07cd5fbc53",
"lessThan": "944d8509c2220a2313d4a094a646507929fb6f8d",
"status": "affected",
"versionType": "git"
},
{
"version": "0a67003b1985c79811160af1b01aca07cd5fbc53",
"lessThan": "5ccea7eacb7786c358833634f45700365f6c1d99",
"status": "affected",
"versionType": "git"
}
]
}Linux
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/mailbox/imx-mailbox.c"
],
"versions": [
{
"version": "5.7",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.7",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.12.111",
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.18.53",
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "7.2",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}