CVE-2026-72243
In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
Affected versions
Fixed in
6.1.178,
6.6.145,
6.12.97,
6.18.40,
7.1.5,
7.2-rc3
and their respective stable series.
References
6 totalFrequently asked questions
-
What is CVE-2026-72243?
CVE-2026-72243 is a unscored severity Linux kernel vulnerability . CVE-2026-72243 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-72243?
Yes. CVE-2026-72243 has been patched. Fixed versions include 6.1.178, 6.6.145, 6.12.97 and others.
-
Is CVE-2026-72243 actively exploited?
No. CVE-2026-72243 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.