EUVD-2026-17835

🗓️ 01 Apr 2026 09:31:27Reported by EUVDType

AppArmor fixes missing bounds check on default table in verify_dfa to prevent out-of-bounds access during differential encoding.

Reporter	Title	Published	Views	Family All 107
ATTACKERKB	CVE-2026-23407	1 Apr 202608:36	–	attackerkb
CBLMariner	CVE-2026-23407 affecting package kernel for versions less than 6.6.130.1-1	30 Mar 202616:12	–	cbl_mariner
Circl	CVE-2026-23407	1 Apr 202611:30	–	circl
CNNVD	Linux kernel 安全漏洞	1 Apr 202600:00	–	cnnvd
CNVD	Linux kernel buffer overflow vulnerability (CNVD-2026-17161)	10 Apr 202600:00	–	cnvd
CVE	CVE-2026-23407	1 Apr 202608:36	–	cve
Cvelist	CVE-2026-23407 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	1 Apr 202608:36	–	cvelist
Debian CVE	CVE-2026-23407	1 Apr 202608:36	–	debiancve
Microsoft CVE	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	10 Apr 202608:02	–	mscve
NVD	CVE-2026-23407	1 Apr 202609:16	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "2a78e41b-0365-328b-9034-aba75292f2c8",
        "vendor": {
          "name": "Linux"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2370af1e-7f4b-3969-93d7-1ef465c2770e",
        "product": {
          "name": "Linux"
        },
        "product_version": "031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed"
      },
      {
        "id": "267f6662-f7a5-327c-9caf-0c8ae0ad798c",
        "product": {
          "name": "Linux"
        },
        "product_version": "031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <76b4d36c5122866452d34d8f79985e191f9c3831"
      },
      {
        "id": "4acdf1e4-0226-3e43-a1a6-5c66eb7eda84",
        "product": {
          "name": "Linux"
        },
        "product_version": "4.17"
      },
      {
        "id": "5bffe4f7-e95f-3888-a5e1-162cc698d933",
        "product": {
          "name": "Linux"
        },
        "product_version": "031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc"
      },
      {
        "id": "77b1c23f-d052-3e44-901d-cb39ac8c80c2",
        "product": {
          "name": "Linux"
        },
        "product_version": "031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <7c7cf05e0606f554c467e3a4dc49e2e578a755b4"
      },
      {
        "id": "782bd97b-1bc5-30e9-bec0-d1d35376573b",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.19.8"
      },
      {
        "id": "8ffc67ef-98a6-30f7-b13c-3358c7132580",
        "product": {
          "name": "Linux"
        },
        "product_version": "031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <d352873bbefa7eb39995239d0b44ccdf8aaa79a4"
      },
      {
        "id": "a9c037f9-02dd-3d9a-87bd-5abcb02b6068",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.18.18"
      },
      {
        "id": "b3c3d2de-6e77-3e6f-adcc-ea565b5f1850",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.6.130"
      },
      {
        "id": "c1c5ef66-8ccf-3325-8b71-60b76b06c51d",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 0"
      },
      {
        "id": "ce19ff94-aafd-3882-ac9b-988214797e6d",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 7.0-rc4"
      },
      {
        "id": "e49d013c-9b6d-369f-a4aa-498ca20f54c2",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.12.77"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/7c7cf05e0606f554c467e3a4dc49e2e578a755b4
git	www.git.kernel.org/stable/c/76b4d36c5122866452d34d8f79985e191f9c3831
git	www.git.kernel.org/stable/c/5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc
git	www.git.kernel.org/stable/c/f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed
git	www.git.kernel.org/stable/c/d352873bbefa7eb39995239d0b44ccdf8aaa79a4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23407

01 Apr 2026 09:31Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.00007