Lucene search
+L

CVE-2026-89761

🗓️ 11 Sep 2026 19:47:02Reported by LinuxType 
cve
 cve
🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

Out-of-bounds write in Linux AppArmor label vec null termination when vector lacks extra entry.

Related
Detection
Affected
Refs
Paths
Vulners
CNA
Node
OR
linuxlinux_kernelRange4.13–6.6.160
linuxlinux_kernelRange6.7.0–6.12.109
linuxlinux_kernelRange6.13.0–6.18.50
linuxlinux_kernelRange6.19.0–7.2.4
linuxlinux_kernelRange7.3.0≥
[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/apparmor/include/label.h"
    ],
    "versions": [
      {
        "version": "f1bd904175e8190ce14aedee37e207ab51fe3b30",
        "lessThan": "b17c8f5dcb36a032688847b2bce4bd813b4baad1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f1bd904175e8190ce14aedee37e207ab51fe3b30",
        "lessThan": "9124e078ea2250d8d01d2162a550acb01ef5bf48",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f1bd904175e8190ce14aedee37e207ab51fe3b30",
        "lessThan": "28069434aef66b9d084f0609b7a29c171846815e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f1bd904175e8190ce14aedee37e207ab51fe3b30",
        "lessThan": "36bdd0b45ec3f4822832a56e9db8674c8450dfce",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f1bd904175e8190ce14aedee37e207ab51fe3b30",
        "lessThan": "9f1e40193eef7f047e6b77cfb4b4cafdecd7a123",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/apparmor/include/label.h"
    ],
    "versions": [
      {
        "version": "4.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.13",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.160",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
namerequest body/proc/self/attr/apparmor/currentAn unprivileged task can trigger an out-of-bounds write in the AppArmor kernel module by writing a specially crafted label name to this path. The name is parsed before permission checks are performed.CWE-193
namerequest body/sys/kernel/security/apparmor/query_labelThe query_label path behind the securityfs .access file (mode 0666) performs no permission check, allowing an unprivileged user to trigger an out-of-bounds write by providing a label name with many components.CWE-193

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Oct 2026 13:20Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.17.8
EPSS0.0012
45