CVE-2026-23407

medium Red Hat
EPSS Score
0.0%
Exploitation probability in 30 days
Top 95% most likely to be exploited
Published: April 1, 2026 (43 days ago)
Last Modified: April 1, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in AppArmor, a security module within the Linux kernel. A local user could exploit this vulnerability by providing a specially crafted Deterministic Finite Automaton (DFA), a set of rules for pattern matching, to the `verify_dfa()` function. This malformed input causes the system to access memory outside of its intended boundaries. Successful exploitation of this flaw could lead to a system crash, resulting in a Denial of Service (DoS).

CWE

CWE-1285

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References