Answer in brief
CVE-2026-72242 records a Unknown severity vulnerability in selinux: avoid sk_socket dereference in selinux_sctp_bind_connect(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d452930fd3b9031e59abfeddb2fa383f1403d61a <5d4d93f9bfbc997ffbb03cd6107e8f6979dbb9b4 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <cc8bd47b35eca82393cbad08b1cc86f02e034439 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <d61a80b17254be7230bc5544f8e62ddf21ab38e2 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <37d642b37ccdc31e1947c2ebc8dc38f03d4a0ceb || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <56acfeb10019e200ab6787d01f8d7cbe0f01526f | 5d4d93f9bfbc997ffbb03cd6107e8f6979dbb9b4, cc8bd47b35eca82393cbad08b1cc86f02e034439, d61a80b17254be7230bc5544f8e62ddf21ab38e2, 37d642b37ccdc31e1947c2ebc8dc38f03d4a0ceb, 56acfeb10019e200ab6787d01f8d7cbe0f01526f |
| Linux/Linuxgeneric | 4.17 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() selinux_sctp_bind_connect() dereferences sk->sk_socket to pass a struct socket * to selinux_socket_bind() and selinux_socket_connect_helper(). However, when the hook is invoked from the ASCONF softirq path (sctp_process_asconf), there is no file reference guaranteeing that sk->sk_socket is non-NULL. The setsockopt callers (bindx, connectx, set_primary, sendmsg connect) hold a file reference and are not affected. Both selinux_socket_bind() and selinux_socket_connect_helper() immediately resolve sock->sk, never using the struct socket * for anything else. Refactor the inner logic into helpers that take a struct sock * directly so that selinux_sctp_bind_connect() never needs to touch sk->sk_socket at all.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-72242 records a Unknown severity vulnerability in selinux: avoid sk_socket dereference in selinux_sctp_bind_connect(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d452930fd3b9031e59abfeddb2fa383f1403d61a <5d4d93f9bfbc997ffbb03cd6107e8f6979dbb9b4 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <cc8bd47b35eca82393cbad08b1cc86f02e034439 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <d61a80b17254be7230bc5544f8e62ddf21ab38e2 || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <37d642b37ccdc31e1947c2ebc8dc38f03d4a0ceb || >=d452930fd3b9031e59abfeddb2fa383f1403d61a <56acfeb10019e200ab6787d01f8d7cbe0f01526f | 5d4d93f9bfbc997ffbb03cd6107e8f6979dbb9b4, cc8bd47b35eca82393cbad08b1cc86f02e034439, d61a80b17254be7230bc5544f8e62ddf21ab38e2, 37d642b37ccdc31e1947c2ebc8dc38f03d4a0ceb, 56acfeb10019e200ab6787d01f8d7cbe0f01526f |
| Linux/Linuxgeneric | 4.17 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() selinux_sctp_bind_connect() dereferences sk->sk_socket to pass a struct socket * to selinux_socket_bind() and selinux_socket_connect_helper(). However, when the hook is invoked from the ASCONF softirq path (sctp_process_asconf), there is no file reference guaranteeing that sk->sk_socket is non-NULL. The setsockopt callers (bindx, connectx, set_primary, sendmsg connect) hold a file reference and are not affected. Both selinux_socket_bind() and selinux_socket_connect_helper() immediately resolve sock->sk, never using the struct socket * for anything else. Refactor the inner logic into helpers that take a struct sock * directly so that selinux_sctp_bind_connect() never needs to touch sk->sk_socket at all.
Quoted source text, attributed separately from HOL analysis.