Search: CVE-2026-72243

A vulnerability in the Linux kernel SELinux implementation was resolved that involved missing checks for connect-related permissions when using TCP Fast Open. The issue was that SELinux's socket_sendmsg() hook did not call selinux_socket_connect() when the MSG_FASTOPEN flag was used, potentially allowing unauthorized TCP connections. This flaw has been fixed by updating the SELinux hook to properly enforce connect permissions with TCP Fast Open. The vulnerability affects specific Linux kernel versions and has a CVSS score of 8.4, indicating high impact on confidentiality and integrity. A patch is available to address this issue.