Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-23404— apparmor: replace recursive profile removal with iterative approach

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于配置文件移除使用递归方法，可能导致内核堆栈耗尽和系统崩溃。

AI Predicted 7.8 Difficulty: Easy EPSS 0.18% · P7

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux c88d4c7b049e87998ac0a9f455aa545cc895ef92< ea854f032190cc9f26dc4a0e727090c89e55e342 affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< 4fdc847b107321dec22bf8ecd6019b7af76d7886 affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< b36a04284d0208be94e5e401409caa00e2bf1be1 affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< 33959a491e9fd557abfa5fce5ae4637d400915d3 affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< 999bd704b0b641527a5ed46f0d969deff8cfa68b affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< 7eade846e013cbe8d2dc4a484463aa19e6515c7f affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< a6a941a1294ac5abe22053dc501d25aed96e48fe affected
c88d4c7b049e87998ac0a9f455aa545cc895ef92< ab09264660f9de5d05d1ef4e225aa447c63a8747 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-23404

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
apparmor: replace recursive profile removal with iterative approach
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for ((i=0; i<1024; i++)); do echo -e "profile $pf { \n }" | apparmor_parser -K -a; pf="$pf//x"; done $ echo -n a > /sys/kernel/security/apparmor/.remove Replace the recursive __aa_profile_list_release() approach with an iterative approach in __remove_profile(). The function repeatedly finds and removes leaf profiles until the entire subtree is removed, maintaining the same removal semantic without recursion.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于配置文件移除使用递归方法，可能导致内核堆栈耗尽和系统崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux c88d4c7b049e87998ac0a9f455aa545cc895ef92 ~ ea854f032190cc9f26dc4a0e727090c89e55e342 -
Linux Linux 2.6.36 -

II. Public POCs for CVE-2026-23404

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-23404

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-04-01 · 11 CVEs total

CVE-2026-23411 7.8 HIGH apparmor: fix race between freeing data and fs accessing it
CVE-2026-23410 7.8 HIGH apparmor: fix race on rawdata dereference
CVE-2026-23408 7.8 HIGH apparmor: Fix double free of ns_name in aa_replace_profiles()
CVE-2026-23407 7.8 HIGH apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
CVE-2026-23406 7.8 HIGH apparmor: fix side-effect bug in match_char() macro usage
CVE-2026-23409 apparmor: fix differential encoding verification
CVE-2026-23405 apparmor: fix: limit the number of levels of policy namespaces
CVE-2026-23403 apparmor: fix memory leak in verify_header
CVE-2026-23402 KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-23404

No comments yet

Leave a comment