VDB
CVE-2025-40107
CVE-2025-40107
PUBLISHED
CVSS 8.699999809265137 HIGH
Microsoft Azure Linux ist eine von Microsoft entwickelte Linux-Distribution, die für die Ausführung von Workloads in der Azure-Cloud optimiert ist. Windows ist ein Betriebssystem von Microsoft.
EPSS 0.19% · 7.3th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.19%
7.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Azure Linux azl3 kernel 6.6.104.2-4 on 3.0 | |
| Open Source | Open Source Linux Kernel <6.16.12 | |
| SUSE | SUSE Linux | |
| Microsoft | Microsoft Azure Linux azl3 nghttp2 1.61.0-2 on 3.0 | |
| Microsoft | Microsoft Azure Linux azl3 cmake 3.30.3-10 on 3.0 | |
| Open Source | Open Source Linux Kernel <6.12.52 | |
| Ubuntu | Ubuntu Linux | |
| Microsoft | Microsoft Azure Linux azl3 containerd2 2.0.0-14 on 3.0 | |
| Microsoft | Microsoft Azure Linux azl3 mysql 8.0.44-2 on 3.0 | |
| Debian | Debian Linux | |
| Open Source | Open Source Linux Kernel <6.6.111 | |
| Microsoft | Microsoft Azure Linux azl3 rust 1.86.0-9 on 3.0 | |
| Microsoft | Microsoft Azure Linux azl3 runc 1.3.3-1 on 3.0 | |
| Fedora | Fedora Linux | |
| Open Source | Open Source Linux Kernel <6.1.156 | |
| Dell | Dell ECS 3.8.1.0-3.8.1.7 | |
| Microsoft | Microsoft Windows Subsystem for Linux GUI | |
| Microsoft | Microsoft Azure Linux azl3 libarchive 3.7.7-3 on 3.0 | |
| Open Source | Open Source Linux Kernel <6.17 | |
| Microsoft | Microsoft Azure Linux azl3 curl 8.11.1-4 on 3.0 |
…and 3 more
Timeline
- Nov 3, 2025 CVE Published
- Nov 4, 2025 EPSS Score
- Nov 10, 2025 EPSS Score
- Nov 15, 2025 EPSS Score
- Nov 21, 2025 EPSS Score
- Nov 26, 2025 EPSS Score
- Dec 2, 2025 EPSS Score
- Dec 8, 2025 EPSS Score
- Dec 13, 2025 EPSS Score
- Dec 19, 2025 EPSS Score
- Dec 25, 2025 EPSS Score
- Dec 30, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2563.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2563 advisory
- https://msrc.microsoft.com/update-guide/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2I3DAC5P7RIJP4M7YPNYJVIE4ZG7RSHV/ advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2025-2f6ca95a74 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2025-7c468696d2 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2025-d39f46567c advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2025-2ca3289343 advisory
- https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2483.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2483 advisory
- https://lore.kernel.org/linux-cve-announce/2025110316-CVE-2025-40107-5bac@gregkh/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2411971 advisory
- https://github.com/advisories/GHSA-394X-FQ64-JQF6 advisory
- https://kernel.org advisory
- https://lists.debian.org/debian-security-announce/2025/msg00219.html advisory
- https://lists.debian.org/debian-lts-announce/2025/11/msg00022.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-December/023538.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2025-December/023573.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3D5W2444LYTUJVXYGB63LTMU25GRLRJR/ advisory
…and 23 more