CVE-2026-23404

apparmor: replace recursive profile removal with iterative approach

published April 1, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

apparmor: replace recursive profile removal with iterative approach

The profile removal code uses recursion when removing nested profiles,

which can lead to kernel stack exhaustion and system crashes.

Reproducer:

$ pf='a'; for ((i=0; i<1024; i++)); do

echo -e "profile $pf { \n }" | apparmor_parser -K -a;

pf="$pf//x";

done

$ echo -n a > /sys/kernel/security/apparmor/.remove

Replace the recursive __aa_profile_list_release() approach with an

iterative approach in __remove_profile(). The function repeatedly

finds and removes leaf profiles until the entire subtree is removed,

maintaining the same removal semantic without recursion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-04-01T08:36Z
EPSS history
Timeline
  • 01 APR 08:36Z
    apparmor: replace recursive profile removal with iterative approach
    cvelistv5