CVE-2026-72457

apparmor: fail policy unpack on accept2 allocation failure

N/A
Published: August 15, 2026 at 05:57 AM UTC
Updated: August 17, 2026 at 06:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpack_pdb() may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning a policydb with the required table missing. Return -ENOMEM through the normal failure path when the ACCEPT2 allocation fails. Remove the now-unused out label.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.17 ≤ v < 6.18.406.17 ≤ v < 7.1.56.17 ≤ v < 7.22e12c5f060176ede209673e4f63ea5d0e3c5814c6.17
Vendor states this is fixed in 106e909e12baf059538f0b0f1a59f87781d25b3c (fixed)
Vendor states this is fixed in 22dc9433d458cff1270f120685114a9753e0ad1b (fixed)
Vendor states this is fixed in 45cf568241048e560a81aa2053f06a62069f5640 (fixed)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card