CVE-2026-62840: Linux Kernel Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Linux Kernel Elevation of Privilege Vulnerability
Other sources
Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Linux kernel - Microsoft MANA Network Driver
Microsoft Linux 3P (Third Party) Distros<7.3
7.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.3
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·08:37 PM
Data Sourced
via MITRE·08:37 PM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
Exploitation requires local access by an authorized attacker with low privileges. No user interaction is required.
2
Which software is identified as affected?
The listed software includes the Microsoft Linux kernel - Microsoft MANA Network Driver and Microsoft Linux 3P (Third Party) Distros. No affected version numbers are provided.