CVE-2026-23269

A flaw was found in the Linux kernel's AppArmor component. This vulnerability allows a local attacker to provide specially crafted AppArmor policy data. When this malicious data is processed during policy unpacking, it can lead to an out-of-bounds read in the aa_dfa_next() function. This memory corruption could result in a denial of service or the potential disclosure of sensitive information.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.