CVE-2026-72457

Source
https://cve.org/CVERecord?id=CVE-2026-72457
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72457.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72457
Downstream
Published
2026-08-15T05:57:03Z
Modified
2026-08-18T03:30:57Z
Summary
apparmor: fail policy unpack on accept2 allocation failure
Details

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fail policy unpack on accept2 allocation failure

unpack_pdb() may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning a policydb with the required table missing.

Return -ENOMEM through the normal failure path when the ACCEPT2 allocation fails. Remove the now-unused out label.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72457.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2e12c5f060176ede209673e4f63ea5d0e3c5814c
Fixed
22dc9433d458cff1270f120685114a9753e0ad1b
Fixed
106e909e12baf059538f0b0f1a59f87781d25b3c
Fixed
45cf568241048e560a81aa2053f06a62069f5640

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72457.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72457.json"