Log in Start free

Vulnerability · Published Apr 1, 2026 · Assigned by Linux

CVE-2026-23411apparmor: fix race between freeing data and fs accessing it

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private data on its end after removing the original entry from the file system. However the inode can aand does live beyond that point and it is possible that some of the fs call back functions will be invoked after the reference has been put, which results in a race between freeing the data and accessing it through the fs. While the rawdata/loaddata is the most likely candidate to fail the race, as it has the fewest references. If properly crafted it might be possible to trigger a race for the other types stored in i_private. Fix this by moving the put of i_private referenced data to the correct place which is during inode eviction.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.164-1DEBIAN-CVE-2026-23411
Debian:13linux6.12.74-2DEBIAN-CVE-2026-23411
Debian:14linux6.19.6-2DEBIAN-CVE-2026-23411
Ubuntu:22.04:LTSlinux5.15.0-173.183UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux6.8.0-106.106UBUNTU-CVE-2026-23411
Ubuntu:25.10linux6.17.0-19.19UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-aws5.15.0-1103.110UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-aws6.17.0-1009.9UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1009.9~24.04.2UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-azure6.17.0-1010.10UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1010.10~24.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gcp5.15.0-1103.112UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-gcp6.17.0-1009.9UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1009.9~24.04.3UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gke5.15.0-1099.105UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1086.94UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-19.19~24.04.2UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-ibm5.15.0-1097.100UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1098.104UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-kvm5.15.0-1095.100UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-173.183UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1098.99UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1014.14UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1055.55UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1044.44UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1017.17UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oracle5.15.0-1100.106UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-oracle6.17.0-1009.9UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1009.9~24.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-raspi5.15.0-1097.100UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54UBUNTU-CVE-2026-23411
Ubuntu:25.10linux-raspi6.17.0-1010.10UBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23411
Ubuntu:25.10linux-realtime6.17.0-1008.9UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23411
Ubuntu:25.10linux-riscv6.17.0-19.19.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-riscv-6.176.17.0-19.19.1~24.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-23411
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2026-23411
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1067.71UBUNTU-CVE-2026-23411

Affected products (as reported)

VendorProductVersions
Linux Linux c961ee5f21b202dea60b63eeef945730d92e46a6 – before a92c5e5086a87d082696245a8607666da3d80554c961ee5f21b202dea60b63eeef945730d92e46a6 – before 667df93769c02ff581c77d2d8f162147e719c557c961ee5f21b202dea60b63eeef945730d92e46a6 – before 3ddb961d2929bbb3204a2bba21b5d8153cd3f7ccc961ee5f21b202dea60b63eeef945730d92e46a6 – before ae10787d955fb255d381e0d5589451dd72c614b1c961ee5f21b202dea60b63eeef945730d92e46a6 – before eecce026399917f6efa532c56bc7a3e9dd6ee68bc961ee5f21b202dea60b63eeef945730d92e46a6 – before 13bc2772414d68e94e273dea013181a986948ddfc961ee5f21b202dea60b63eeef945730d92e46a6 – before 2a732ed26fbd048e7925d227af8cf9ea43fb5cc9c961ee5f21b202dea60b63eeef945730d92e46a6 – before 8e135b8aee5a06c52a4347a5a6d51223c6f36ba3
Linux Linux 4.13

References