Msrc Azl3 Kernel 6.6.130.1-3 On Azure Linux 3.0 vulnerabilities

CVE-2026-31408 [HIGH] Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-31407 [HIGH] netfilter: conntrack: add missing netlink policy validations netfilter: conntrack: add missing netlink policy validations Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23401 [HIGH] KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23444 [HIGH] wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23473 [MEDIUM] io_uring/poll: fix multishot recv missing EOF on wakeup race io_uring/poll: fix multishot recv missing EOF on wakeup race Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23468 [MEDIUM] drm/amdgpu: Limit BO list entry count to prevent resource exhaustion drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23442 [MEDIUM] ipv6: add NULL checks for idev in SRv6 paths ipv6: add NULL checks for idev in SRv6 paths Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-31394 [MEDIUM] mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23472 [MEDIUM] serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-31410 [MEDIUM] ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23214 [MEDIUM] btrfs: reject new transactions if the fs is fully read-only btrfs: reject new transactions if the fs is fully read-only Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23213 [MEDIUM] drm/amd/pm: Disable MMIO access during SMU Mode 1 reset drm/amd/pm: Disable MMIO access during SMU Mode 1 reset Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71225 [MEDIUM] md: suspend array while updating raid_disks via sysfs md: suspend array while updating raid_disks via sysfs Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71227 [MEDIUM] wifi: mac80211: don't WARN for connections on invalid channels wifi: mac80211: don't WARN for connections on invalid channels Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23207 [MEDIUM] spi: tegra210-quad: Protect curr_xfer check in IRQ handler spi: tegra210-quad: Protect curr_xfer check in IRQ handler Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68188 [HIGH] tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68174 [HIGH] amd/amdkfd: enhance kfd process check in switch partition amd/amdkfd: enhance kfd process check in switch partition Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68190 [HIGH] drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-68304 [HIGH] Bluetooth: hci_core: lookup hci_conn on RX path on protocol side Bluetooth: hci_core: lookup hci_conn on RX path on protocol side Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-40339 [MEDIUM] drm/amdgpu: fix nullptr err of vm_handle_moved drm/amdgpu: fix nullptr err of vm_handle_moved Mariner: Mariner Linux: Linux Customer Action Required: Yes