CVE-2026-23406

medium Red Hat
EPSS Score
0.0%
Exploitation probability in 30 days
Top 95% most likely to be exploited
Published: April 1, 2026 (43 days ago)
Last Modified: April 1, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in AppArmor within the Linux kernel. The `match_char()` macro, when processing differential encoding chains, incorrectly advances the string pointer multiple times. This can lead to an out-of-bounds read when the pointer moves beyond the input buffer boundary. A local attacker could exploit this memory corruption vulnerability, potentially causing a denial of service or information disclosure.

CWE

CWE-788

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References