CVE-2026-23406

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc7-next-20260127

Description The Linux kernel contains a flaw within the apparmor subsystem, specifically in the match char() macro. This macro incorrectly evaluates its character parameter multiple times during differential encoding chain traversal. When used with str++, the string pointer increments with each inner loop iteration, causing the Deterministic Finite Automaton (DFA) to check different characters and potentially skip input. This can lead to out-of-bounds reads when the pointer goes beyond the input buffer's boundaries. The issue manifests as a slab-out-of-bounds error, as indicated by KASAN.

Recommendations Update to kernel version 6.19.0-rc7-next-20260127 or later.