CVE-2026-46055

kernel: apparmor: Fix string overrun due to missing termination

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · October 20, 2026

Description

A flaw was found in the AppArmor security module of the Linux kernel. A missing string termination in the aa_dfa_match function can lead to a string buffer overrun. This vulnerability could allow a local attacker to cause a denial of service (DoS) or potentially disclose sensitive information due to a slab-out-of-bounds read.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-170 · Improper Null Termination