CVE-2026-23408: apparmor: Fix double free of ns_name in aa_replace_profiles()
apparmor: Fix double free of nsname in aareplaceprofiles()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In aa_replace_profiles(), after transferring ent->ns_name into ns_name (ns_name = ent->ns_name), NULL out ent->ns_name so it is not freed again later; ensure the double-free is prevented when kfree(ns_name) occurs.
Linux kernel (apparmor) Fix double free of ns_name in aa_replace_profiles() = NULL out ent->ns_name after transferring to ns_name
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23408?
CVE-2026-23408 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2026-23408?
To fix CVE-2026-23408, update your Linux kernel to the latest patched version provided by your distribution.
What is the impact of CVE-2026-23408?
CVE-2026-23408 may lead to a denial of service condition due to a double free vulnerability in AppArmor.
Which versions of the Linux kernel are affected by CVE-2026-23408?
CVE-2026-23408 affects various versions of the Linux kernel prior to the fix being applied.
What component of the Linux kernel does CVE-2026-23408 affect?
CVE-2026-23408 specifically affects the AppArmor security module in the Linux kernel.