CVE-2026-23407
Description
A flaw was found in AppArmor, a security module within the Linux kernel. A local user could exploit this vulnerability by providing a specially crafted Deterministic Finite Automaton (DFA), a set of rules for pattern matching, to the verify_dfa() function. This malformed input causes the system to access memory outside of its intended boundaries. Successful exploitation of this flaw could lead to a system crash, resulting in a Denial of Service (DoS).
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
