CVE-2026-23665: Microsoft Linux Diagnostic Extension

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Linux Diagnostic Extension: from 1.0.0, before 2.1.24 (fixed in 2.1.24)

Published 2026-03-10. Last modified 2026-06-17.