PT-2026-72431 · Linux · Linux Kernel
CVE-2026-72243
·
Published
2026-08-15
·
Updated
2026-08-18
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
SELinux failed to verify connect-related permissions when TCP Fast Open was utilized. This occurred because the system was not updated to ensure these checks were performed during the introduction of TCP Fast Open support. The issue involves the
socket sendmsg() hook, which needs to call selinux socket connect() when the MSG FASTOPEN flag is passed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel