CVE-2026-23405
kernel: apparmor: fix: limit the number of levels of policy namespaces
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the AppArmor security module within the Linux kernel. A local user could exploit this vulnerability by creating and nesting policy namespaces without limit. This unbounded nesting can lead to the exhaustion of system resources, resulting in a Denial of Service (DoS) for the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-770 · Allocation of Resources Without Limits or Throttling