Search: CVE-2026-23410

A race condition vulnerability in the Linux kernel's AppArmor security module (CVE-2026-23410) has been resolved. The flaw involves a use-after-free situation caused by improper reference counting of rawdata inodes, which can lead to freed memory being accessed. This issue could be triggered by an attacker opening a rawdata file while simultaneously removing the last reference to it, causing a dangling pointer dereference. The fix involves implementing a double reference counting scheme to prevent the race condition. This vulnerability affects multiple specific versions of the Linux Azure kernel and has a high severity score. A patch is available and should be applied to mitigate the risk.