CVE-2026-72243

In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.

Package Linux Kernel
Published 2026-08-15
Last modified 2026-08-15
Patch available
Yes

Affected versions

Fixed in 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5, 7.2-rc3 and their respective stable series.

Fixed in
✓ 6.1.178 6.1.x ✓ 6.6.145 6.6.x ✓ 6.12.97 6.12.x ✓ 6.18.40 6.18.x ✓ 7.1.5 7.1.x ✓ 7.2-rc3

Frequently asked questions

  • What is CVE-2026-72243?

    CVE-2026-72243 is a unscored severity Linux kernel vulnerability . CVE-2026-72243 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-72243?

    Yes. CVE-2026-72243 has been patched. Fixed versions include 6.1.178, 6.6.145, 6.12.97 and others.

  • Is CVE-2026-72243 actively exploited?

    No. CVE-2026-72243 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.