Race Condition in Linux Kernel's AppArmor Affects Data Integrity

CVE-2026-23411

What is CVE-2026-23411?

A race condition has been identified in the AppArmor subsystem of the Linux Kernel, which can compromise data integrity. When AppArmor removes a file system entry, it improperly handles references to i_private data. After the removal process, the inode may still exist, creating an opportunity for file system callback functions to access the released data. This race condition can lead to potentially exploitable scenarios if crafted inputs are used, particularly affecting rawdata/loaddata due to their minimal references. The vulnerability has been mitigated by adjusting the reference management to occur during the inode eviction process.

References