Msrc Azl3 Kernel 6.6.126.1-1 On Azure Linux 3.0 vulnerabilities

CVE-2026-23395 [HIGH] Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23325 [HIGH] wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23393 [HIGH] bridge: cfm: Fix race condition in peer_mep deletion bridge: cfm: Fix race condition in peer_mep deletion Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23287 [HIGH] irqchip/sifive-plic: Fix frozen interrupt due to affinity setting irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23327 [HIGH] cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23335 [HIGH] RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23234 [HIGH] f2fs: fix to avoid UAF in f2fs_write_end_io() f2fs: fix to avoid UAF in f2fs_write_end_io() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23235 [HIGH] f2fs: fix out-of-bounds access in sysfs attribute read/write f2fs: fix out-of-bounds access in sysfs attribute read/write Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23392 [HIGH] netfilter: nf_tables: release flowtable after rcu grace period on error netfilter: nf_tables: release flowtable after rcu grace period on error Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23336 [HIGH] wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23302 [HIGH] net: annotate data-races around sk->sk_{data_ready,write_space} net: annotate data-races around sk->sk_{data_ready,write_space} Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23377 [HIGH] ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23269 [HIGH] apparmor: validate DFA start states are in bounds in unpack_pdb apparmor: validate DFA start states are in bounds in unpack_pdb Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23310 [HIGH] bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23374 [HIGH] blktrace: fix __this_cpu_read/write in preemptible context blktrace: fix __this_cpu_read/write in preemptible context Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23352 [HIGH] x86/efi: defer freeing of boot services memory x86/efi: defer freeing of boot services memory Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23340 [HIGH] net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23313 [HIGH] i40e: Fix preempt count leak in napi poll tracepoint i40e: Fix preempt count leak in napi poll tracepoint Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23289 [HIGH] IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23243 [HIGH] RDMA/umad: Reject negative data_len in ib_umad_write RDMA/umad: Reject negative data_len in ib_umad_write Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade