# Multiple vulnerabilities in Microsoft Azure Linux kernel

Published: 2026-06-25 · Severity: routine · Sectors: Infrastructure, Technology
Canonical: https://vorant.io/reports/55002590-124c-5424-a938-4ec9deff3228/multiple-vulnerabilities-in-microsoft-azure-linux-kernel
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Multiple unspecified vulnerabilities in Azure Linux kernel 6.6.141.1-1 require patching to kernel 6.6.142.1-1.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0802

## What to check

- Applies to: The 2 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has published an advisory regarding multiple vulnerabilities affecting Microsoft Azure Linux, specifically in the azl3 kernel versions prior to 6.6.142.1-1. The advisory does not specify the precise nature of the security issues, only that they allow an attacker to cause an unspecified security problem. Microsoft released security bulletins on 10 June 2026 addressing CVE-2026-46275 and CVE-2026-46323.

Defenders running Azure Linux kernel 6.6.141.1-1 or earlier should upgrade to version 6.6.142.1-1 or later. The advisory references Microsoft's security bulletin for detailed patch availability and remediation steps. No information is provided regarding active exploitation or specific attack vectors.

## Mentioned in this report

- Vulnerabilities: CVE-2026-46275, CVE-2026-46323

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0802

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/55002590-124c-5424-a938-4ec9deff3228/multiple-vulnerabilities-in-microsoft-azure-linux-kernel.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup