CVE-2026-72462

Received Received - Intake

Race Condition in Linux Kernel Unix Socket Mediation

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peer_path is used The holding a reference to the peer_sk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with unix_release_sock(). Fix this by taking the state lock and getting a reference to the path under lock. Ideally for connected sockets we would cache this information so we don't have to take the lock here. But for now just fix the race.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72462

EUVD

EUVD-2026-59361

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	to 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition in AppArmor's unix socket mediation when using peer_path. The issue occurs because holding a reference to the peer socket is not sufficient to safely access its path. The race happens when the path is accessed outside the state lock, potentially allowing a conflict with unix_release_sock(). The fix requires taking the state lock and obtaining a reference to the path under lock to prevent this race.

Detection Guidance

This vulnerability is specific to the Linux kernel's AppArmor module and involves a race condition in unix socket mediation. Detection requires checking kernel logs for AppArmor-related errors or examining kernel source code for the affected function. No direct network commands are available for detection.

Impact Analysis

This vulnerability could allow unauthorized access or information disclosure if exploited. It specifically affects unix socket mediation in systems using AppArmor, potentially enabling an attacker to bypass security controls or gain unintended access to sensitive data through socket operations.

Compliance Impact

This vulnerability may impact compliance by weakening access controls for unix sockets, which could lead to unauthorized data access or disclosure. Systems handling sensitive data under GDPR or HIPAA may fail to meet requirements for secure data processing and access logging if this flaw is exploited.

Mitigation Strategies

Update your Linux kernel to the patched version that includes the fix for this race condition. Monitor AppArmor logs for any related errors after applying the update. If you cannot update immediately, consider disabling unix socket mediation in AppArmor as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-72462. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70