Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23403

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made. Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9e2c65786d253b6c6979835058a5d7bca054e48a832705ecb247a09fa3e81d81
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["security/apparmor/policy_unpack.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType":"semver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/apparmor/policy_unpack.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9d678eb0fe55c9195d9a253e8c5b82a87b930737","status":"affected","version":"dd51c84857630e77c139afe4d9bba65fc051dc3f","versionType":"git"},{"lessThan":"6b79abcb3c985e153fcf9d395e1d4336081aabc2","status":"affected","version":"dd51c84857630e77c139afe4d9bba65fc051dc3f","versionType":"git"},{"lessThan":"bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557","status":"affected","version":"dd51c8485763…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["security/apparmor/policy_unpack.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType":"semver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/apparmor/policy_unpack.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9d678eb0fe55c9195d9a253e8c5b82a87b930737","status":"affected","version":"dd51c84857630e77c139afe4d9bba65fc051dc3f","versionType":"git"},{"lessThan":"6b79abcb3c985e153fcf9d395e1d4336081aabc2","status":"affected","version":"dd51c84857630e77c139afe4d9bba65fc051dc3f","versionType":"git"},{"lessThan":"bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557","status":"affected","version":"dd51c8485763…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/42fd831abfc15d0643c14688f0522556b347e7e6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/4f0889f2df1ab99224a5e1ac4e20437eea5fe38e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/663ce34786e759ebcbeb3060685c20bcc886d51a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/6b79abcb3c985e153fcf9d395e1d4336081aabc2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/786e2c2a87d9c505f33321d1fd23a176aa8ddeb1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/9d678eb0fe55c9195d9a253e8c5b82a87b930737"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e38c55d9f834e5b848bfed0f5c586aaf45acb825"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:12dcf331593ba62cad5d43b73facca34b39db7ef67c9d39a76dca6a462792789 · sha256:0a86c7df246b091f… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer