Out-of-Bounds Write Vulnerability in Linux Kernel's AppArmor by Linux Foundation

CVE-2026-89761

What is CVE-2026-89761?

A critical out-of-bounds write vulnerability exists within the Linux kernel's AppArmor module, wherein the null termination of a label vector is inadequately handled. This flaw arises when invoking the aa_vec_unique function with a specific flag, allowing an unprivileged task to exploit system attributes accessible through the proc filesystem. The insufficient buffer allocation can lead to writing data beyond allocated memory, effectively creating a vector overflow. This vulnerability highlights the necessity for robust memory management and security checks in kernel processes.

References