Memory Vulnerability in Linux Kernel's AppArmor Functionality

CVE-2026-89762

What is CVE-2026-89762?

A use-after-free vulnerability in the Linux kernel's AppArmor module could potentially allow an attacker to exploit a failure to properly check and replace credentials during security hook invocations. This flaw arises when the function begin_current_label_crit_section() inadvertently leads to accessing outdated credential structures. In scenarios where credentials are overridden, the incompatibility between objective and subjective credentials can result in corrupted memory references, leading to unstable system behavior. The issue is particularly critical given the frequent invocation of these hooks and their potential for causing significant disruptions in kernel operations.

References