CyberICT

CVE-2025-40355

Microsoft · Published January 20, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

sysfs: check visibility before changing group attribute ownership. sysfs: check visibility before changing group attribute ownership

Affected Products

  • azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
  • azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.130.1-3 on Azure Linux 3.0
  • azl3 kernel 6.6.138.1-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H