CVE-2026-72459

CVE-2026-72459 concerns the Linux kernel AppArmor path: in aa_label_alloc(), a secid is allocated before creating the label proxy. If the subsequent proxy step fails, the error path currently frees only the label memory, leaking resources initialized by aa_label_init(). The fix is to call aa_labe...

CVE-2026-72459 apparmor: aa_label_alloc use aa_label_free on alloc failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources...

CVE-2026-72459 apparmor: aa_label_alloc use aa_label_free on alloc failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources...

CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

EUVD-2026-59356

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

EUVD-2026-59352

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-72453

The CVE-2026-72453 issue affects the Linux kernel regcache initialization path. If an error occurs in the cache_ops->populate callback and the cache operations include an exit callback, the error code from populate() is overwritten by the exit() return value, hiding the real error from regcach...

CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-72445 ALSA: usb-audio: qcom: clear opened when stream enable fails

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set before the serviceinterval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged a...

CVE-2026-72430 net/sched: act_ct: fix nf_connlabels leak on two error paths

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix nfconnlabels leak on two error paths tcfctfillparams calls nfconnlabelsget setting putlabels when TCACTLABELS is present, but two later error sites use a bare return instead of "goto err", skipping the err:...

EUVD-2026-59329

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix nfconnlabels leak on two error paths tcfctfillparams calls nfconnlabelsget setting putlabels when TCACTLABELS is present, but two later error sites use a bare return instead of "goto err", skipping the err:...

CVE-2026-72430

The CVE-2026-72430 issue affects the Linux kernel net/sched code (act_ct) where tcf_ct_fill_params() calls nf_connlabels_get() and later paths skip proper cleanup, causing nf_connlabels leaks on two error paths. Each failed RTM_NEWACTION in a network namespace can increment net->ct.labels_used...

EUVD-2026-59320

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled but no rule is added, fiblookup performs route lookup directly on two tables. Since the first lookup does not properly bail out, the...

CVE-2026-72421 ipv4: fib: Don't ignore error route in local/main tables.

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled but no rule is added, fiblookup performs route lookup directly on two tables. Since the first lookup does not properly bail out, the...

CVE-2026-72421 ipv4: fib: Don't ignore error route in local/main tables.

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled but no rule is added, fiblookup performs route lookup directly on two tables. Since the first lookup does not properly bail out, the...

CVE-2026-72411

The CVE-2026-72411 issue affects the Linux kernel’s DSA mxl862xx code. A use-after-free could occur when handling an MDIO CRC error: mxl862xx_crc_err_work_fn() iterates DSA ports and closes CPU conduits, while mxl862xx_remove() unregisters the switch and cancels the work. If CRC error work runs a...

CVE-2026-72411 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

EUVD-2026-59310

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...