CVE-2026-23403

apparmor: fix memory leak in verify_header

State: Published
Severity: Not scored
Published: Apr 1, 2026
Updated: May 11, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix memory leak in verify_header

The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made.

Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dd51c84857630e77c139afe4d9bba65fc051dc3f to before 9d678eb0fe55c9195d9a253e8c5b82a87b930737Affected dd51c84857630e77c139afe4d9bba65fc051dc3f to before 6b79abcb3c985e153fcf9d395e1d4336081aabc2Affected dd51c84857630e77c139afe4d9bba65fc051dc3f to before bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557Affected dd51c84857630e77c139afe4d9bba65fc051dc3f to before 663ce34786e759ebcbeb3060685c20bcc886d51aAffected dd51c84857630e77c139afe4d9bba65fc051dc3f to before 786e2c2a87d9c505f33321d1fd23a176aa8ddeb1Affected dd51c84857630e77c139afe4d9bba65fc051dc3f to before 4f0889f2df1ab99224a5e1ac4e20437eea5fe38eAffected dd51c84857630e77c139afe4d9bba65fc051dc3f to before 42fd831abfc15d0643c14688f0522556b347e7e6Affected dd51c84857630e77c139afe4d9bba65fc051dc3f to before e38c55d9f834e5b848bfed0f5c586aaf45acb825Affected
LinuxLinux	3.12Affected before 3.12Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.169 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.77 through 6.12.Not affected 6.18.18 through 6.18.Not affected 6.19.8 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

dd51c84857630e77c139afe4d9bba65fc051dc3f to before 9d678eb0fe55c9195d9a253e8c5b82a87b930737Affected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before 6b79abcb3c985e153fcf9d395e1d4336081aabc2Affected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557Affected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before 663ce34786e759ebcbeb3060685c20bcc886d51aAffected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before 786e2c2a87d9c505f33321d1fd23a176aa8ddeb1Affected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before 4f0889f2df1ab99224a5e1ac4e20437eea5fe38eAffected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before 42fd831abfc15d0643c14688f0522556b347e7e6Affected
dd51c84857630e77c139afe4d9bba65fc051dc3f to before e38c55d9f834e5b848bfed0f5c586aaf45acb825Affected

LinuxLinux

3.12Affected
before 3.12Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.169 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.77 through 6.12.*Not affected
6.18.18 through 6.18.*Not affected
6.19.8 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.