CVE-2026-23408

Description

A flaw was found in AppArmor within the Linux kernel. This vulnerability involves a double free of the ns_name variable in the aa_replace_profiles() function. This can occur when ns_name is assigned from ent->ns_name without properly nulling out ent->ns_name, leading to it being freed twice. A local attacker could potentially exploit this memory corruption to cause a denial of service or other unpredictable system behavior.

Understanding the Weakness (CWE)

Availability,Integrity

Technical Impact: DoS: Crash, Exit, or Restart

Frequently Asked Questions

Want to get errata notifications? Sign up here.