CVE-2026-72460
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
apparmor: check label build before no_new_privs test
In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label with fn_label_build_in_scope() before the no_new_privs subset check. The build helper can fail and return NULL or an ERR_PTR, but the result was passed to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL() check. Reuse the existing target-label build failure handling immediately after the build. This preserves the current audit handling while preventing the subset helper from dereferencing an invalid label.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | a29f06db44b4c94597ded58f639eed3e21781ac3 | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | cfc224866530a6842b6c2d2d30ef6a9b0e64bb9c | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | 31cb109db5e6322ed22304fd5c0dedbaa438d6d3 | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | b7c45c05a396a017c49ac7949de240a0dfc0ac4e | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | d84bb195d208adbf77f012ca2a96e11163f6def1 | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | d82160132345688a09cbaa648cfdd16bb32e8ea2 | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | ec926b2a351eeeb31e6c9aee02e0c32f94b5588f | Unavailable | None listed |
| e00b02bb6ac2a1893227ce8014b649028d6425d2 | affected | git | a58cafd38b46fb1a2220e2fbbcfe291ea75fa147 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.13 | Unavailable | None listed |
| 5.10.261 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.212 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.178 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.145 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.97 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.40 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.5 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |