AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72459

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AppArmor component, specifically in the aa_label_alloc function, which improperly handles memory allocation failures. If the allocation of a label proxy fails, it leads to a resource leak, as initialized resources are not properly released, potentially compromising system integrity. Linux system administrators and developers utilizing AppArmor should prioritize addressing this issue to prevent resource leaks and ensure robust security.

CVE
CVE-2026-72459
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.