CVE-2026-72243

HighCVSS 8.4

Published: 15/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel SELinux module, connect-related permissions were not checked when using TCP Fast Open. The fix adds a call to selinux_socket_connect() in the socket_sendmsg() hook when MSG_FASTOPEN is used.

Risk Assessment

Missing permission checks could allow unauthorized network connections, posing a threat to system integrity and confidentiality.

Recommendation

It is recommended to update the Linux kernel to a version containing the fix and review SELinux policies for TCP Fast Open rules.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.