A vulnerability has been found in Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 and classified as critical. Impacted is the function aa_replace_profiles of the component apparmor. The manipulation leads to double free. This vulnerability is listed as CVE-2026-23408. The attack must be carried out from within the local network. There is no available exploit. The affected component should be upgraded.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 145a0ef21c8e944957f58e2c8ffcd8a10f46266a, 145a0ef21c8e944957f58e2c8ffcd8a10f46266a, 145a0ef21c8e944957f58e2c8ffcd8a10f46266a, 145a0ef21c8e944957f58e2c8ffcd8a10f46266a, 145a0ef21c8e944957f58e2c8ffcd8a10f46266a, 5.5, 6.6.129, 6.12.76, 6.18.17, 6.19.7, 7.0-rc3 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| linux | linux | mitre_affected | 90% |
Updated description with new details, changed severity to CRITICAL, and added new affected versions.
Updated description with more technical detail, added affected versions, and clarified patch availability.
Initial creation
