CVE-2026-23407
kernel: apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 1, 2026
Updated · June 28, 2026
Description
A flaw was found in AppArmor, a security module within the Linux kernel. A local user could exploit this vulnerability by providing a specially crafted Deterministic Finite Automaton (DFA), a set of rules for pattern matching, to the verify_dfa() function. This malformed input causes the system to access memory outside of its intended boundaries. Successful exploitation of this flaw could lead to a system crash, resulting in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input