Threats Tagged 'ghsa-jvqw-3p6q-2fgx'

A high-severity vulnerability (CVE-2026-90246) in the Linux kernel's AppArmor component involves an integer overflow in the verify_tags() function's bounds check. This flaw allows an out-of-bounds read during policy loading when processing a crafted policy blob, potentially leading to denial of service or information disclosure. The vulnerability arises because the addition of two 32-bit unsigned integers wraps around, bypassing bounds checks. The flaw is exploitable by unprivileged tasks in nested user namespaces due to insufficient privilege checks. The issue has been resolved by performing the addition in 64-bit arithmetic to prevent overflow.