CVE-2026-72401: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insn_aux_data leak on verifier err_free_env path When bpf_check() allocates env->insn_aux_data successfully but later fails to allocate env->succ, it jumps directly to err_free_env. The existing vfree(env->insn_aux_data) sits before the err_free_env label, so that direct jump bypasses it and leaks insn_aux_data. Move vfree(env->insn_aux_data) into err_free_env so all early and late exit paths release it consistently.

Засегнати продукти

• Linux Linux: 2f69c5685427308d2f312646779313f3677536bc преди d8df91756890de058646597367507b239a6d2025; 2f69c5685427308d2f312646779313f3677536bc преди 26490a375cb9be9bac96b5171610fd85ca6c2305
• Linux Linux: 6.19; преди 6.19; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-72401
• https://nvd.nist.gov/vuln/detail/CVE-2026-72401
• https://git.kernel.org/stable/c/d8df91756890de058646597367507b239a6d2025
• https://git.kernel.org/stable/c/26490a375cb9be9bac96b5171610fd85ca6c2305