CVE-2026-72456

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the AppArmor module where the get current exe path() function fails to release resources when a path resolution error occurs. Specifically, the function acquires both an exe file reference and a path reference; however, if the aa path name() function fails, the system returns immediately without releasing these references, leading to a resource leak. This is resolved by routing failures through a common cleanup path to ensure that fput() and path put() are always executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.