CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure
A missing error check in AppArmor policy unpacking can lead to a null pointer dereference and system crash if memory allocation fails.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72457?
CVE-2026-72457 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fail policy unpack on accept2 allocation failure
unpack_pdb() may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning a policydb with the required table missing.
Return -ENOMEM through the normal failure path when the ACCEPT2 allocation fails. Remove the now-unused out label.
Which versions are affected by CVE-2026-72457?
How do I fix CVE-2026-72457?
Apply the vendor's patch.
Is CVE-2026-72457 being exploited?
There is no known exploitation of CVE-2026-72457 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72457, DEBIAN-CVE-2026-72457, GHSA-4vqv-ff48-xvv6, UBUNTU-CVE-2026-72457.