CVE-2026-23408
Description
A flaw was found in AppArmor within the Linux kernel. This vulnerability involves a double free of the ns_name variable in the aa_replace_profiles() function. This can occur when ns_name is assigned from ent->ns_name without properly nulling out ent->ns_name, leading to it being freed twice. A local attacker could potentially exploit this memory corruption to cause a denial of service or other unpredictable system behavior.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: DoS: Crash, Exit, or Restart
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.