CVE-2026-23409
kernel: apparmor: fix differential encoding verification
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 1, 2026
Updated · June 28, 2026
Description
A flaw was found in AppArmor, a security module in the Linux kernel. This vulnerability occurs due to incorrect verification of differential encoding chains, which are designed to prevent malicious loops. An attacker could exploit this flaw by crafting a specially designed differential encoding chain, causing the system to misinterpret it as already verified. This could lead to a bypass of security policies and potentially result in unexpected system behavior or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-372 · Incomplete Internal State Distinction