CVE-2026-72460

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the AppArmor module where the aa change profile() function utilizes fn label build in scope() to create a replacement label before performing a no new privs subset check. If the build helper fails and returns a NULL or an ERR PTR, the result is passed to aa label is unconfined subset() before the IS ERR OR NULL() check is performed, which can lead to the dereferencing of an invalid label.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.