The vulnerability is a heap-based buffer overflow in the Azure Diagnostics extension used by Azure Linux virtual machines. Exploiting this flaw allows an attacker with local or authorized access to overflow a memory buffer, leading to uncontrolled memory writes and the ability to execute arbitrary code with elevated privileges. The attacker can thereby gain root level access on the affected VM, enabling full system compromise, data exfiltration, or pivoting to other resources.

Microsoft Azure Linux virtual machines equipped with the Azure Diagnostics extension are affected. This includes any Linux‑based VM that has the Azure diagnostics extension installed, regardless of distribution, with the vulnerability present in the default version shipped with Azure. Specific patch versions are not listed, so all VMs running the extension at the time of the advisory are considered vulnerable until patched.

The CVSS score of 7.8 indicates a serious risk, while the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in CISA's KEV catalog. Attackers would need local or authorized access to the VM, likely through existing Azure authentication. The heap overflow is exploitable from user space, giving a clear path for privilege escalation within the VM.