一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-72243 [HIGH] – In the Linux kernel, the following vulnerability has been resolved: selinux: check connec

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

selinux: check connect-related permissions on TCP Fast Open

Similar to Landlock, SELinux was not updated when TCP Fast Open
support was introduced to ensure connect-related permissions are
checked when using TCP Fast Open. Update its socket_sendmsg() hook to
call selinux_socket_connect() when MSG_FASTOPEN is passed.