CVE-2026-23410
kernel: apparmor: fix race on rawdata dereference
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's AppArmor security module. This vulnerability, a race condition, allows a local attacker to trigger a use-after-free error by simultaneously opening rawdata files and removing an associated AppArmor profile. This can lead to the system accessing freed memory, which may result in privilege escalation or arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count