CVE-2026-23268

A flaw was found in the Linux kernel's AppArmor component. An unprivileged local user can exploit a confused deputy attack by manipulating a privileged process to write to AppArmor interfaces. This allows the user to load, replace, and remove security profiles, leading to full policy management. The consequences include bypassing user namespace restrictions, removing confinement, causing a Denial of Service (DoS) by denying application execution, and potentially exploiting other kernel bugs for local privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.