CVE Database›Document archive›CVE-2026-23410

CVE-2026-23410

kernel: apparmor: fix race on rawdata dereference

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's AppArmor security module. This vulnerability, a race condition, allows a local attacker to trigger a use-after-free error by simultaneously opening rawdata files and removing an associated AppArmor profile. This can lead to the system accessing freed memory, which may result in privilege escalation or arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-911 · Improper Update of Reference Count