NetSight
IP …
medium5.5

CVE-2026-23403

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, le…

Impact

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made. Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.12.1 before 5.10.253
from 5.11 before 5.15.203
from 5.16 before 6.1.169
from 6.2 before 6.6.130
from 6.7 before 6.12.77
from 6.13 before 6.18.18

Weakness classification

CWE-401

References