CVE-2026-72461

CVE-2026-72461 concerns the Linux kernel, specifically an AppArmor refcount leak in the sk_ctx update path. The root cause is that update_sk_ctx() transfers the plabel reference but then unconditionally puts it in the caller; the fix is to obtain a reference to prevent the leak. The available con...

CVE-2026-72461 apparmor: fix refcount leak when updating the sk_ctx

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the skctx Currently updateskctx transfers the plabel reference, unfortunately it is also unconditionally put in the caller. Ideally we would make the caller conditionally put the referenc...