Out-of-Bounds Read and Write Vulnerability in Linux Kernel's AppArmor

CVE-2026-23407

What is CVE-2026-23407?

This vulnerability within the Linux Kernel's AppArmor is primarily associated with a flaw in the verify_dfa() function, which fails to validate array indexes during the handling of differential encoding. Specifically, when the function traverses the differential encoding chain, it uses an index that may exceed the valid range of DEFAULT_TABLE, leading to potential out-of-bounds reads and writes. This can allow malicious actors to manipulate kernel memory and possibly execute arbitrary code, posing a severe risk to system integrity.

References