CVE-2026-72457

A flaw was found in the AppArmor security module within the Linux kernel. During the unpacking of security policies, a memory allocation failure for the ACCEPT2 table was not handled correctly. This could result in an incomplete security policy being loaded, potentially leading to a bypass of intended security restrictions or unexpected system behavior.

Red Hat rates the impact of this flaw as moderate (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). A flaw was found in the AppArmor security module of the Linux kernel. When unpacking AppArmor security policies, unpack_pdb() may need to allocate a missing ACCEPT2 table required by older policy data. If that allocation failed, the code set an error message but jumped to the success path, returning a policy database with the required table missing. An incomplete policy loaded in this way could bypass intended AppArmor security restrictions or cause unexpected system behavior. Exploitation requires local access, privileged policy-loading capability, and a memory allocation failure occurring during policy unpacking. All tracked Red Hat Enterprise Linux and Red Hat In-Vehicle OS streams are marked NOT affected for this flaw because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.