PT-2026-29488 · Linux+2 · Linux Kernel+2
CVE-2026-23405
·
Published
2026-04-01
·
Updated
2026-07-01
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in apparmor where the number of policy namespaces is not bounded, potentially leading to resource exhaustion through arbitrary nesting. This issue is not strictly tied to user namespaces, allowing for the creation and nesting of policy namespaces to an unlimited depth.
Recommendations
Limit the depth of policy namespaces to match the depth of user namespaces.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu