CVE-2026-23665 is a heap-based buffer overflow vulnerability found in the Linux Diagnostic Extension of Azure Linux Virtual Machines. Rated 7.8 High, this flaw allows an authorized attacker with low privileges to achieve local privilege escalation, leading to high impact on confidentiality, integrity, and availability without requiring user interaction. While there are no known public exploits or evidence of active exploitation, the vulnerability has received some community attention and media coverage as part of the March 2026 Patch Tuesday releases.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.0.0, < 2.1.24CPE matchmatch criteria | cpe:2.3:a:microsoft:linux_diagnostic_extension:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.