CVE-2026-72022

A flaw was found in the Linux kernel's Logical Link Control (LLC) subsystem. The llc_ui_autobind() function fails to properly release a reference to a Service Access Point (SAP) after a successful autobind operation. A local user can repeatedly perform autobind and close cycles, which leads to the exhaustion of all dynamic SAP values. This can result in a denial of service, preventing subsequent autobind operations from succeeding.

This vulnerability is rated as Moderate severity because an authenticated local user can trigger dynamic SAP exhaustion to cause a localized denial of service for applications using LLC sockets, with no compromise to system confidentiality or integrity. In Red Hat Enterprise Linux, support for the LLC protocol is not enabled in default kernel builds, preventing exposure under standard operating environments. Exploitation requires local code execution and specifically targets the autobind mechanism of the LLC networking protocol, limiting the blast radius solely to LLC-dependent socket binding.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.