CVE-2026-45884
kernel: apparmor: avoid per-cpu hold underflow in aa_get_buffer
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's AppArmor module. A local attacker could exploit an integer underflow vulnerability in the aa_get_buffer() function. This flaw prevents buffers from being returned to the global list, potentially leading to resource exhaustion and a Denial of Service (DoS) condition for other central processing units (CPUs).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-191 · Integer Underflow (Wrap or Wraparound)