🟠 High | Source: Microsoft Security Response Center
CVE-2026-63801 is a memory safety vulnerability in the Linux kernel’s TIPC (Transparent Inter-Process Communication) networking subsystem, specifically a slab-use-after-free bug in the TIPC AEAD decryption path. This class of vulnerability can potentially be exploited to corrupt kernel memory, leading to privilege escalation or system crashes. It is relevant to Azure workloads running Linux-based virtual machines or containerised environments where the TIPC module is active.
Security Architect’s Take: Review whether Linux VMs or AKS node pools in your Azure environment have the TIPC kernel module loaded — if not required, disable it via a kernel module deny list to reduce attack surface. Monitor Microsoft’s MSRC update guide for a CVSS score and patch availability, and prioritise patching affected Linux kernel versions as soon as vendor-supplied updates are released.
Original advisory: CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done