Answer in brief
CVE-2026-72459 records a Unknown severity vulnerability in apparmor: aa_label_alloc use aa_label_free on alloc failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72459 records a Unknown severity vulnerability in apparmor: aa_label_alloc use aa_label_free on alloc failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <b14fbacad77d64594228983ec20d61a224f3f491 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <b5a9da5d36162d34db0f36abb15420e295176793 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <7cb69e109610bba500e1ecb870f7988a4717208a || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <cc2192899d502e3321e60cf1e91421e7309d089c || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <bf310b044e85d4de670c94295c5d8e4c5bc5e7bc || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <6d91479174240f39e9edea250d95fa08c678a207 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <654fe7505dc6889724d4094fa64f89991afabfc3 | b14fbacad77d64594228983ec20d61a224f3f491, b5a9da5d36162d34db0f36abb15420e295176793, 7cb69e109610bba500e1ecb870f7988a4717208a, cc2192899d502e3321e60cf1e91421e7309d089c, bf310b044e85d4de670c94295c5d8e4c5bc5e7bc, ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4, 6d91479174240f39e9edea250d95fa08c678a207, 654fe7505dc6889724d4094fa64f89991afabfc3 |
| Linux/Linuxgeneric | 4.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <b14fbacad77d64594228983ec20d61a224f3f491 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <b5a9da5d36162d34db0f36abb15420e295176793 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <7cb69e109610bba500e1ecb870f7988a4717208a || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <cc2192899d502e3321e60cf1e91421e7309d089c || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <bf310b044e85d4de670c94295c5d8e4c5bc5e7bc || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <6d91479174240f39e9edea250d95fa08c678a207 || >=f1bd904175e8190ce14aedee37e207ab51fe3b30 <654fe7505dc6889724d4094fa64f89991afabfc3 | b14fbacad77d64594228983ec20d61a224f3f491, b5a9da5d36162d34db0f36abb15420e295176793, 7cb69e109610bba500e1ecb870f7988a4717208a, cc2192899d502e3321e60cf1e91421e7309d089c, bf310b044e85d4de670c94295c5d8e4c5bc5e7bc, ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4, 6d91479174240f39e9edea250d95fa08c678a207, 654fe7505dc6889724d4094fa64f89991afabfc3 |
| Linux/Linuxgeneric | 4.13 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.
Quoted source text, attributed separately from HOL analysis.