In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104571 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    apparmor: aa_label_alloc use aa_label_free on alloc failure

    aa_label_alloc() allocates a secid before allocating or taking the label     proxy. If the later proxy step fails, the error path only freed the label     memory, leaking any resources initialized by aa_label_init().

    Use aa_label_free() on the failure path so partially initialized labels     release their secid and other label resources before the backing memory is     freed.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before     allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label     memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so     partially initialized labels release their secid and other label resources before the backing memory is     freed. (CVE-2026-72459)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Type	Severity
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	Local	high
339600	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104571)	Nessus	Unity Linux Local Security Checks	Local	high
337383	Linux Distros Unpatched Vulnerability : CVE-2026-72459	Nessus	Misc.	Local	high
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-72459

high

Tenable Plugins

high

high

high

high