CVE Database›CVE-2026-23409

CVE-2026-23409

kernel: apparmor: fix differential encoding verification

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 1, 2026

Updated · June 28, 2026

Description

A flaw was found in AppArmor, a security module in the Linux kernel. This vulnerability occurs due to incorrect verification of differential encoding chains, which are designed to prevent malicious loops. An attacker could exploit this flaw by crafting a specially designed differential encoding chain, causing the system to misinterpret it as already verified. This could lead to a bypass of security policies and potentially result in unexpected system behavior or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-372 · Incomplete Internal State Distinction