CVE-2026-72455

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.2

Description In the AppArmor module of the Linux kernel, a bug exists where the path name() function may pass a potentially uninitialized name pointer to the aa audit file() function. This occurs if the path->dentry was previously replaced with aa null.dentry. This issue can result in a page fault, which is a type of system error that occurs when a program attempts to access a memory page that is not currently mapped in the physical memory. The vulnerability involves the audit log untrustedstring() function.

Recommendations For Linux kernel version 7.0.2, update the kernel to a version where the uninitialized pointer in path name() is properly initialized before being passed to aa audit file().