{"id":"CVE-2026-72459","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-72459","summary":"apparmor: aa_label_alloc use aa_label_free on alloc failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: aa_label_alloc use aa_label_free on alloc failure\n\naa_label_alloc() allocates a secid before allocating or taking the label\nproxy. If the later proxy step fails, the error path only freed the label\nmemory, leaking any resources initialized by aa_label_init().\n\nUse aa_label_free() on the failure path so partially initialized labels\nrelease their secid and other label resources before the backing memory is\nfreed.","published":"2026-08-15T05:57:04.794Z","modified":"2026-08-16T03:48:43.254485541Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"5.10.261"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/654fe7505dc6889724d4094fa64f89991afabfc3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d91479174240f39e9edea250d95fa08c678a207"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7cb69e109610bba500e1ecb870f7988a4717208a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b14fbacad77d64594228983ec20d61a224f3f491"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b5a9da5d36162d34db0f36abb15420e295176793"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bf310b044e85d4de670c94295c5d8e4c5bc5e7bc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cc2192899d502e3321e60cf1e91421e7309d089c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72459.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72459"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-16T03:48:43.254485541Z"}}