CVE-2026-89761

A flaw was found in the Linux kernel's AppArmor security module. An out-of-bounds write vulnerability exists when null terminating a label vector due to improper memory allocation. An unprivileged local attacker can exploit this by writing to specific system files, potentially leading to a denial of service (DoS) or, in some cases, privilege escalation. This vulnerability requires an AppArmor policy to be loaded on the system.

This vulnerability is rated as an Important impact because an unprivileged local user could leverage out-of-bounds memory writes to cause a system crash or potentially achieve elevated privileges if AppArmor is actively enforced. However, Red Hat Enterprise Linux and OpenShift Container Platform do not ship or support AppArmor, relying instead on SELinux for mandatory access control. Consequently, the vulnerable code is not compiled into Red Hat enterprise kernels, and default Red Hat environments remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.