CVE-2026-72462: apparmor: fix race in unix socket mediation when peer_path is used
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix race in unix socket mediation when peerpath is used
The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with unixreleasesock(). Fix this by taking the state lock and getting a reference to the path under lock.
Ideally for connected sockets we would cache this information so we don't have to take the lock here. But for now just fix the race.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the vulnerability by applying the resolved upstream fix for the Linux kernel issue: "apparmor: fix race in unix socket mediation when peer_path is used" (race with unix_release_sock() where holding a reference to peer_sk is not enough to ensure access to the peer sk path under the state lock).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72462?
CVE-2026-72462 has a risk score of 34, indicating a moderate vulnerability.
How do I fix CVE-2026-72462?
To fix CVE-2026-72462, ensure you apply the latest Linux kernel updates that address this specific vulnerability.
What systems are impacted by CVE-2026-72462?
CVE-2026-72462 affects systems using the Linux kernel with AppArmor enabled.
What type of vulnerability is CVE-2026-72462?
CVE-2026-72462 is a race condition vulnerability related to Unix socket mediation.
When was CVE-2026-72462 published?
CVE-2026-72462 was published on August 15, 2026.