CVE-2026-45943 addresses a vulnerability related to the erofs filesystem, specifically a failure in reading inline data for ztailpacking pclusters. The information provided is limited and does not include technical details about the nature of the vulnerability or its exploitation. There is no CVSS score available, no known exploits in the wild, and no patch or remediation details provided. The affected products include Microsoft and Azure Linux 3.0 versions. Due to the lack of detailed impact or exploit information, the severity is assessed based on the potential for data read failures in the filesystem.
CVE-2026-45901 relates to a vulnerability involving the netfilter nf_tables component where a commit_mutex usage was reverted in the reset path. The provided information does not include technical details about the nature of the vulnerability or its impact. There is no CVSS score or detailed impact description available. No known exploits in the wild have been reported. The affected products include Microsoft and Azure Linux 3.0 versions. No patch or remediation information is provided, and the vendor advisory content is minimal and does not clarify the fix status.
CVE-2026-45838 is a vulnerability related to the bpf subsystem, specifically addressing an issue in end-of-list detection within the cgroup_storage_get_next_key() function. The vulnerability affects Microsoft products including Azure Linux 3.0. No detailed technical exploitation or impact information is provided. There is no CVSS score available for this vulnerability, and no known exploits in the wild have been reported. Patch or remediation status is not confirmed from the provided data.
CVE-2026-46018 is a vulnerability related to ALSA usb-audio where parsing of UAC2 rates is stopped at MAX_NR_RATES. The provided description does not detail the technical nature or impact of the vulnerability. No CVSS score or detailed impact information is available. There are no known exploits in the wild and no patch or remediation information has been provided. The affected products include Microsoft and Azure Linux 3.0 versions. Due to limited information, the severity is assessed as medium based on the potential for audio subsystem issues but lacking explicit impact details.
CVE-2026-45999 is a vulnerability in the erofs component related to an unsigned underflow in the function z_erofs_lz4_handle_overlap(). The vulnerability affects Microsoft products including Azure Linux 3.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild. Patch status is not confirmed as no patch or vendor advisory details about remediation are available.
CVE-2026-45997 addresses a vulnerability related to the SCSI subsystem in Microsoft and Azure Linux 3.0 where a missing put_disk() call occurs if device_add(&disk_dev) fails. The provided information does not include detailed technical specifics or exploitation data. No CVSS score is available, and there are no known exploits in the wild. The patch status is not confirmed as no patch or vendor advisory details on remediation are provided.
CVE-2026-45994 is a vulnerability in the ibmasm component related to out-of-bounds (OOB) reads in the command_file_write function caused by missing size checks. The vulnerability affects Microsoft products including Azure Linux 3.0. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch availability is not confirmed from the provided data, and no vendor advisory details about remediation are included.
CVE-2026-46024 is a vulnerability related to a potential null pointer dereference in the function ceph_handle_auth_reply() within libceph. The information provided is limited and does not include technical details beyond the potential null pointer dereference issue. There is no CVSS score or detailed impact description available. No known exploits in the wild have been reported. The affected products include Microsoft and Azure Linux 3.0. No patch or remediation information is provided, and the vulnerability is not related to a cloud service.
CVE-2026-46102 is a vulnerability related to a memory leak in the network subsystem, specifically involving the strparser component's strp_abort_strp() function. The issue causes a leak of skb_head structures, which are kernel socket buffers, potentially leading to resource exhaustion. This vulnerability affects Microsoft products including Azure Linux 3.0. There is no CVSS score or detailed impact information provided. No known exploits are reported in the wild. Patch status is not confirmed as no patch or vendor advisory details are available.