CVE Database›CVE-2026-23408

CVE-2026-23408

kernel: apparmor: Fix double free of ns_name in aa_replace_profiles()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 1, 2026

Updated · October 20, 2026

Description

A flaw was found in AppArmor within the Linux kernel. This vulnerability involves a double free of the ns_name variable in the aa_replace_profiles() function. This can occur when ns_name is assigned from ent->ns_name without properly nulling out ent->ns_name, leading to it being freed twice. A local attacker could potentially exploit this memory corruption to cause a denial of service or other unpredictable system behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle