Search: CVE-2026-23408

A double free vulnerability was identified and fixed in the Linux kernel's AppArmor security module in the aa_replace_profiles() function. The flaw occurs when ns_name is NULL and ent->ns_name is freed twice, potentially leading to memory corruption. This vulnerability has a CVSS score of 7.8 and affects multiple specific Linux kernel versions. The issue has been addressed with an official patch that nullifies ent->ns_name after transferring ownership to prevent double freeing.