CVE-2026-23406

A flaw was found in AppArmor within the Linux kernel. The match_char() macro, when processing differential encoding chains, incorrectly advances the string pointer multiple times. This can lead to an out-of-bounds read when the pointer moves beyond the input buffer boundary. A local attacker could exploit this memory corruption vulnerability, potentially causing a denial of service or information disclosure.