CVE-2026-89762

A flaw was found in the Linux kernel's AppArmor security module. The begin_current_label_crit_section() function, used in various Linux Security Module (LSM) hooks, attempts to replace user credentials when a security label becomes stale. This process can lead to a Use-After-Free (UAF) vulnerability if the old credentials are still referenced or if the replacement occurs with overridden credentials. A local attacker could potentially exploit this flaw to achieve privilege escalation or cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.