CVE Database›Document archive›CVE-2026-23411

CVE-2026-23411

kernel: apparmor: fix race between freeing data and fs accessing it

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 1, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's AppArmor security module. A race condition occurs when AppArmor incorrectly manages the lifecycle of i_private data, leading to situations where data is freed while still being accessed by file system callback functions. This timing vulnerability can result in memory corruption. A local attacker could potentially exploit this flaw to cause a denial of service or, with further exploitation, achieve more severe impacts.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference