CVE-2026-23408
kernel: apparmor: Fix double free of ns_name in aa_replace_profiles()
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 1, 2026
Updated · October 20, 2026
Description
A flaw was found in AppArmor within the Linux kernel. This vulnerability involves a double free of the ns_name variable in the aa_replace_profiles() function. This can occur when ns_name is assigned from ent->ns_name without properly nulling out ent->ns_name, leading to it being freed twice. A local attacker could potentially exploit this memory corruption to cause a denial of service or other unpredictable system behavior.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1341 · Multiple Releases of Same Resource or Handle