CVE-2026-23404

kernel: apparmor: replace recursive profile removal with iterative approach

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's AppArmor security module. A local user could trigger a denial of service by initiating a recursive profile removal operation with deeply nested profiles. This recursive process can lead to kernel stack exhaustion, causing the system to crash.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-770 · Allocation of Resources Without Limits or Throttling