CVE-2026-80619

A flaw was found in the AppArmor security module of the Linux kernel. The aa_replace_profiles function was susceptible to a use-after-free (UAF) vulnerability. This occurred because the function accessed data after it had been deallocated, potentially allowing an attacker to cause a denial of service or execute arbitrary code.

A moderate-severity use-after-free flaw was found in the AppArmor security module of the Linux kernel. The aa_replace_profiles() function in security/apparmor/policy.c accessed udata->size after dropping the load data reference with aa_put_loaddata(udata). A local attacker able to trigger the AppArmor policy replacement path could potentially use this flaw to cause a kernel panic resulting in a denial of service; the upstream description also mentions the possibility of arbitrary code execution. Red Hat rated this flaw Moderate (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because exploitation requires local access and the expected practical impact is loss of availability, which is lower than the upstream CVE.org rating of Important (7.8) that assumes full confidentiality, integrity, and availability impact. All Red Hat products tracked for this flaw, including Red Hat Enterprise Linux 6 through 10 (kernel and kernel-rt) and Red Hat In-Vehicle OS (kernel and kernel-ivos-qualcomm), are marked not affected because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.