CVE-2026-72459
High
Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxb14fbacad77d64594228983ec20d61a224f3f491, b5a9da5d36162d34db0f36abb15420e295176793, 7cb69e109610bba500e1ecb870f7988a4717208a, cc2192899d502e3321e60cf1e91421e7309d089c, bf310b044e85d4de670c94295c5d8e4c5bc5e7bc, ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4, 6d91479174240f39e9edea250d95fa08c678a207, 654fe7505dc6889724d4094fa64f89991afabfc3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < b14fbacad77d64594228983ec20d61a224f3f491, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < b5a9da5d36162d34db0f36abb15420e295176793, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < 7cb69e109610bba500e1ecb870f7988a4717208a, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < cc2192899d502e3321e60cf1e91421e7309d089c, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < bf310b044e85d4de670c94295c5d8e4c5bc5e7bc, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < 6d91479174240f39e9edea250d95fa08c678a207, f1bd904175e8190ce14aedee37e207ab51fe3b30 ≤ v < 654fe7505dc6889724d4094fa64f89991afabfc3, 4.13 | b14fbacad77d64594228983ec20d61a224f3f491, b5a9da5d36162d34db0f36abb15420e295176793, 7cb69e109610bba500e1ecb870f7988a4717208a, cc2192899d502e3321e60cf1e91421e7309d089c, bf310b044e85d4de670c94295c5d8e4c5bc5e7bc, ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4, 6d91479174240f39e9edea250d95fa08c678a207, 654fe7505dc6889724d4094fa64f89991afabfc3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.