CVE-2026-16313

Microsoft · Published August 7, 2026

7.5

CVSS v3.1

HIGH

Patch availableGet patch

Description

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export. Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

Affected Products

azl3 sg3_utils 1.48-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L/E:U