High severity8.4NVD Advisory· Published Aug 15, 2026· Updated Aug 18, 2026
CVE-2026-72243
CVE-2026-72243
Description
In the Linux kernel, the following vulnerability has been resolved:
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
Affected products
76- osv-coords75 versionspkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/rvpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/rtlapkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:linux/kernel
< 5.14.0-687.49.1.el9_8+ 74 more
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: < 5.14.0-687.49.1.el9_8
- (no CPE)range: >= 3.6.0, < 6.1.178
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/11406d0d7e11b4e525bb2ace2c70107031d058danvd
- git.kernel.org/stable/c/44c74d27d1b9aaa99fa8a83640c1223575262b80nvd
- git.kernel.org/stable/c/646ebbc5f2ff9147d084e1213143f091026a611cnvd
- git.kernel.org/stable/c/d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3nvd
- git.kernel.org/stable/c/e507633bf76bccf1a6af27771fb0d6e2862b7eacnvd
- git.kernel.org/stable/c/fc633a598206d4f23af782db7c0b5f3a82751d2cnvd
News mentions
0No linked articles in our index yet.