CVE-2026-23411

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel's AppArmor component contained a race condition between freeing data and filesystem access to it. AppArmor was releasing the reference to i private data after removing the original entry from the filesystem. However, the inode could still be accessed by filesystem callback functions after the reference was released, leading to a potential race condition where the data could be freed while still being accessed. The rawdata/loaddata functionality was identified as the most likely candidate for triggering this race, but it was possible to trigger it for other types of data stored in i private.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.