CVE-2026-72242

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the selinux sctp bind connect() function where it dereferences sk->sk socket to provide a socket structure to selinux socket bind() and selinux socket connect helper(). When the hook is triggered via the ASCONF softirq path (sctp process asconf), there is no file reference to ensure that sk->sk socket is not NULL, potentially leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.