CVE-2026-72458: apparmor: fix NULL pointer dereference in unpack_pdb

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix NULL pointer dereference in unpackpdb

pdb->dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference.

Affected Software

1 affected component

Linux Linux kernel

Aug 15, 2026

CVE Published

via MITRE·05:57 AM

Data Sourced

via MITRE·05:57 AM

Description

CVE-2026-72458 has a risk score of 27, indicating a critical vulnerability.

CVE-2026-72458 is a Null Pointer Dereference vulnerability in the Linux kernel's AppArmor component.

CVE-2026-72458 can lead to a NULL pointer dereference if unpack_dfa fails, potentially causing system crashes.

To fix CVE-2026-72458, update to the latest version of the Linux kernel where this vulnerability has been resolved.

CVE-2026-72458 affects certain versions of the Linux kernel where AppArmor is implemented, and users should check their specific versions.