AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72456

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AppArmor module, where a failure in the `aa_path_name()` function can lead to resource leaks of executable file references. This could potentially result in increased memory usage or denial of service due to unhandled resources. Organizations utilizing Linux systems with AppArmor enabled should prioritize patching to mitigate these risks.

CVE
CVE-2026-72456
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get_current_exe_path() takes both an exe_file reference and a path reference before resolving the path name. If aa_path_name() failed, it returned immediately and leaked both references. Route the failure through the common cleanup path so fput() and path_put() always run after the references are acquired.