CVE-2026-90179

A flaw was found in the Linux kernel's AppArmor security module. When AppArmor is configured in complain mode and a local user attempts to use the change_hat function for a non-existent security profile, a deadlock can occur. This happens because both the change_hat function and the process of creating a new learning profile contend for the same internal lock. Successful exploitation of this vulnerability can lead to a Denial of Service (DoS), causing the affected process to become unresponsive and unkillable. The fix also addresses several related issues, including reference count leaks and a potential Use-After-Free (UAF) vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.