CVE-2026-72462

A flaw was found in the Linux kernel's AppArmor security module. A race condition exists in the Unix socket mediation when handling the peer_path. This allows for a race with unix_release_sock() due to accessing the peer socket path outside of the necessary state lock. This could potentially lead to incorrect access control decisions or other unspecified security bypasses.

This vulnerability is rated as having a Moderate impact because exploitation requires local access and precise execution timing to trigger a race condition, limiting the blast radius to a local denial of service. Red Hat Enterprise Linux is not affected by this flaw as AppArmor is neither supported nor enabled by default, with SELinux serving as the primary security module. Furthermore, the vulnerable implementation was not introduced into the kernel versions maintained across supported Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.