CVE-2026-23403

apparmor: fix memory leak in verify_header

published April 1, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix memory leak in verify_header

The function sets `*ns = NULL` on every call, leaking the namespace

string allocated in previous iterations when multiple profiles are

unpacked. This also breaks namespace consistency checking since *ns

is always NULL when the comparison is made.

Remove the incorrect assignment.

The caller (aa_unpack) initializes *ns to NULL once before the loop,

which is sufficient.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-04-01T08:36Z
EPSS history
Timeline
  • 01 APR 08:36Z
    apparmor: fix memory leak in verify_header
    cvelistv5