CVE-2026-45884

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the AppArmor module where the aa get buffer() function unconditionally decrements the cache->hold variable when pulling from the per-cpu list. If hold reaches 0 while count remains non-zero, the unsigned decrement causes a wrap-around to UINT MAX. This prevents aa put buffer() from returning buffers to the global list, potentially starving other CPUs and forcing repeated kmalloc(aa g path max) allocations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.