CVE-2026-23407

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc7-next-20260127

Description The Linux kernel contains a flaw within the AppArmor subsystem, specifically in the verify dfa() function. This function lacks a bounds check on the DEFAULT table when handling differentially encoded states. A malformed DFA (Deterministic Finite Automaton) with a DEFAULT TABLE entry exceeding the state count can lead to out-of-bounds reads and writes. This issue was identified through KASAN (Kernel Address Sanitizer) reporting, indicating a slab-out-of-bounds error during verification. The root cause is the missing validation of array indices when traversing the differential encoding chain.

Recommendations Update the Linux kernel to version 6.19.0-rc7-next-20260127 or a later version that includes the fix.