PT-2026-72431

CVE-2026-72243

·

Published

2026-06-18

·

Updated

2026-11-06

Description by

CVSS 3.1
8.4
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description SELinux failed to verify connect-related permissions when TCP Fast Open was utilized. This occurred because the system was not updated to ensure these checks were performed during the introduction of TCP Fast Open support. The issue involves the socket sendmsg() hook, which needs to call selinux socket connect() when the MSG FASTOPEN flag is passed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:68570
ALSA-2026:71233
CLSA-2026-1791741836
CLSA-2026-1792977831
CLSA-2026-1792979087
OESA-2026-3706
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4687-1
SUSE-SU-2026:4706-1
USN-8886-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
USN-9003-1
Found an issue in the description? Have something to add? Feel free to write us 👾