Use-After-Free Vulnerability in Linux Kernel Affecting AppArmor

CVE-2026-63827

What is CVE-2026-63827?

A use-after-free vulnerability exists in the AppArmor component of the Linux kernel, specifically in the handling of profile load data. The issue arises when the raw data deduplication process encounters profiles that have dropped their reference count. If an entry remains on the list with a zero reference count, accessing it can lead to memory corruption and crashes. This vulnerability was reproduced under specific testing conditions and resolved through the introduction of a new function that correctly handles reference counts, preventing use-after-free scenarios.

References