CVE-2026-23268 apparmor: fix unprivileged local user can do privileged policy management

🗓️ 18 Mar 2026 17:54:41Reported by LinuxType

AppArmor: fixed unprivileged local user managing policies via apparmorfs by passing an fd to a privileged process.

Reporter	Title	Published	Views	Family All 309
ATTACKERKB	CVE-2026-23268	18 Mar 202617:54	–	attackerkb
CBLMariner	CVE-2026-23268 affecting package kernel for versions less than 6.6.130.1-1	30 Mar 202616:12	–	cbl_mariner
Circl	CVE-2026-23268	19 Mar 202608:25	–	circl
CNNVD	Linux kernel 安全漏洞	18 Mar 202600:00	–	cnnvd
CVE	CVE-2026-23268	18 Mar 202617:54	–	cve
Debian CVE	CVE-2026-23268	18 Mar 202617:54	–	debiancve
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-2209)	9 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-2247)	9 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2293)	10 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2336)	10 Jun 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/apparmor/apparmorfs.c",
      "security/apparmor/include/policy.h",
      "security/apparmor/policy.c"
    ],
    "versions": [
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "a407a078cd41b5261b99d822af784bd9f136eb4d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "4cafce4d6d0a66ec27e3af5637c11901d60189fa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "33ee909702e047c94aaf41d4eea35626d509802c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "17debf5586020790b5717f96e5e6a3ca5bb961ab",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "0fc63dd9170643d15c25681fca792539e23f4640",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "b60b3f7a35c46b2e0ca934f9c988b8fca06d76c6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "b6a94eeca9c6c8f7c55ad44c62c98324f51ec596",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b7fd2c0340eacbee892425e9007647568b7f2a3c",
        "lessThan": "6601e13e82841879406bf9f369032656f441a425",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "security/apparmor/apparmorfs.c",
      "security/apparmor/include/policy.h",
      "security/apparmor/policy.c"
    ],
    "versions": [
      {
        "version": "4.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.253",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.203",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.169",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.130",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.77",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.18",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.8",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/b6a94eeca9c6c8f7c55ad44c62c98324f51ec596
git	www.git.kernel.org/stable/c/0fc63dd9170643d15c25681fca792539e23f4640
qualys	www.qualys.com/2026/03/10/crack-armor.txt
git	www.git.kernel.org/stable/c/a407a078cd41b5261b99d822af784bd9f136eb4d
git	www.git.kernel.org/stable/c/4cafce4d6d0a66ec27e3af5637c11901d60189fa
git	www.git.kernel.org/stable/c/17debf5586020790b5717f96e5e6a3ca5bb961ab
git	www.git.kernel.org/stable/c/b60b3f7a35c46b2e0ca934f9c988b8fca06d76c6
git	www.git.kernel.org/stable/c/33ee909702e047c94aaf41d4eea35626d509802c
git	www.git.kernel.org/stable/c/6601e13e82841879406bf9f369032656f441a425

11 May 2026 22:03Current

CVSS 3.17.8

EPSS0.00134