Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-23403— apparmor: fix memory leak in verify_header

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于verify_header函数存在内存泄漏。

AI Predicted 3.3 Difficulty: Easy EPSS 0.18% · P7

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux dd51c84857630e77c139afe4d9bba65fc051dc3f< 9d678eb0fe55c9195d9a253e8c5b82a87b930737 affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< 6b79abcb3c985e153fcf9d395e1d4336081aabc2 affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557 affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< 663ce34786e759ebcbeb3060685c20bcc886d51a affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< 786e2c2a87d9c505f33321d1fd23a176aa8ddeb1 affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< 4f0889f2df1ab99224a5e1ac4e20437eea5fe38e affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< 42fd831abfc15d0643c14688f0522556b347e7e6 affected
dd51c84857630e77c139afe4d9bba65fc051dc3f< e38c55d9f834e5b848bfed0f5c586aaf45acb825 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-23403

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
apparmor: fix memory leak in verify_header
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made. Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于verify_header函数存在内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux dd51c84857630e77c139afe4d9bba65fc051dc3f ~ 9d678eb0fe55c9195d9a253e8c5b82a87b930737 -
Linux Linux 3.12 -

II. Public POCs for CVE-2026-23403

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-23403

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-01 · 11 CVEs total

CVE-2026-23411 7.8 HIGH apparmor: fix race between freeing data and fs accessing it
CVE-2026-23410 7.8 HIGH apparmor: fix race on rawdata dereference
CVE-2026-23408 7.8 HIGH apparmor: Fix double free of ns_name in aa_replace_profiles()
CVE-2026-23407 7.8 HIGH apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
CVE-2026-23406 7.8 HIGH apparmor: fix side-effect bug in match_char() macro usage
CVE-2026-23409 apparmor: fix differential encoding verification
CVE-2026-23405 apparmor: fix: limit the number of levels of policy namespaces
CVE-2026-23404 apparmor: replace recursive profile removal with iterative approach
CVE-2026-23402 KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-23403

No comments yet

Leave a comment