CVE-2026-45965

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in AppArmor where a NULL pointer dereference occurs when the export binary parameter is disabled at runtime. Profiles loaded before this change retain their raw data in apparmorfs with a symbolic link in the policy directory. When such a profile is replaced, the raw data is set to NULL. However, attempting to resolve the symbolic links for that profile leads to an invalid dereference of profile->rawdata->name because profile->rawdata is NULL, resulting in a kernel oops. This occurs within the rawdata get link base() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.