In the Linux kernel, the following vulnerability has been resolved:

selinux: check connect-related permissions on TCP Fast Open

Similar to Landlock, SELinux was not updated when TCP Fast Open
support was introduced to ensure connect-related permissions are
checked when using TCP Fast Open. Update its socket_sendmsg() hook to
call selinux_socket_connect() when MSG_FASTOPEN is passed.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 11406d0d7e11b4e525bb2ace2c70107031d058da
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < e507633bf76bccf1a6af27771fb0d6e2862b7eac
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < fc633a598206d4f23af782db7c0b5f3a82751d2c
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 646ebbc5f2ff9147d084e1213143f091026a611c
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 44c74d27d1b9aaa99fa8a83640c1223575262b80
0 affected < 6.1.178
0 affected < 6.6.145
0 affected < 6.12.97
0 affected < 6.18.40
0 affected < 7.1.5
Linux Linux affected
Version Status Constraints
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/11406d0d7e11b4e525bb2ace2c70107031d058da cve-icon cve-icon
https://git.kernel.org/stable/c/44c74d27d1b9aaa99fa8a83640c1223575262b80 cve-icon cve-icon
https://git.kernel.org/stable/c/646ebbc5f2ff9147d084e1213143f091026a611c cve-icon cve-icon
https://git.kernel.org/stable/c/d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3 cve-icon cve-icon
https://git.kernel.org/stable/c/e507633bf76bccf1a6af27771fb0d6e2862b7eac cve-icon cve-icon
https://git.kernel.org/stable/c/fc633a598206d4f23af782db7c0b5f3a82751d2c cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
Title selinux: check connect-related permissions on TCP Fast Open
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:31.117Z

Reserved: 2026-08-09T03:40:39.914Z

Link: CVE-2026-72243

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:51.443

Modified: 2026-08-15T06:21:51.443

Link: CVE-2026-72243

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T10:15:03Z

Weaknesses

No weakness.