# Multiple vulnerabilities in Microsoft Azure Linux kernel

Published: 2026-07-09 · Severity: high · Sectors: technology
Canonical: https://vorant.io/reports/19e8217b-22ef-5678-a259-6ae94e770cf8/multiple-vulnerabilities-in-microsoft-azure-linux-kernel

> Multiple vulnerabilities in Azure Linux kernel versions before 6.6.144.1-1 require immediate patching.

CERT-FR has published a security advisory identifying multiple vulnerabilities affecting Microsoft Azure Linux, specifically the azl3 kernel in versions prior to 6.6.144.1-1. Nine CVEs have been disclosed across kernel releases between June 27 and July 5, 2026. The advisory does not provide detailed impact descriptions, stating only that vulnerabilities permit an unspecified security issue. Organizations running Azure Linux should immediately update to kernel version 6.6.144.1-1 or later to remediate the identified flaws. Microsoft MSRC bulletins provide the authoritative guidance and patch availability for each CVE.

## Mentioned in this report

- Vulnerabilities: CVE-2026-52909, CVE-2026-52928, CVE-2026-53138, CVE-2026-53151, CVE-2026-53157, CVE-2026-53163, CVE-2026-53325, CVE-2026-53361, CVE-2026-53362 (KEV)

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0855

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/19e8217b-22ef-5678-a259-6ae94e770cf8/multiple-vulnerabilities-in-microsoft-azure-linux-kernel.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup