CVE-2026-23407

🗓️ 01 Apr 2026 09:16:16Reported by [email protected]Type

AppArmor fix for missing bounds check in verify_dfa, causing out-of-bounds reads and writes.

Reporter	Title	Published	Views	Family All 130
attackerkb	CVE-2026-23407	1 Apr 202608:36	–	attackerkb
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	5 Oct 202611:39	–	astralinux
BDU FSTEC	Linux kernel Heap Buffer Overflow DoS	1 Jun 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-23407 affecting package kernel for versions less than 6.6.130.1-1	30 Mar 202616:12	–	cbl_mariner
Circl	CVE-2026-23407	1 Apr 202611:30	–	circl
CNNVD	Linux Kernel Security Vulnerabilities	1 Apr 202600:00	–	cnnvd
CNVD	Linux kernel buffer overflow vulnerability (CNVD-2026-17161)	10 Apr 202600:00	–	cnvd
CVE	CVE-2026-23407	1 Apr 202608:36	–	cve
Cvelist	CVE-2026-23407 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	1 Apr 202608:36	–	cvelist
Debian CVE	CVE-2026-23407	1 Apr 202608:36	–	debiancve

NVD

Node

linux linux_kernelRange4.17.1–5.10.253

linux linux_kernelRange5.11–5.15.203

linux linux_kernelRange5.16–6.1.169

linux linux_kernelRange6.2–6.6.130

linux linux_kernelRange6.7–6.12.77

linux linux_kernelRange6.13–6.18.18

linux linux_kernelRange6.19–6.19.8

Source	Link
git	www.git.kernel.org/stable/c/f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed
git	www.git.kernel.org/stable/c/7c7cf05e0606f554c467e3a4dc49e2e578a755b4
git	www.git.kernel.org/stable/c/a75e12ca90c9e70ba10fee1be2f63cdd63d91a7c
git	www.git.kernel.org/stable/c/22094c996968a7c5b59cd3fc9fcbdfdd46d02fec
git	www.git.kernel.org/stable/c/555829fd91eaf0711e369b0a92aecb0f0aa3281f
git	www.git.kernel.org/stable/c/76b4d36c5122866452d34d8f79985e191f9c3831
git	www.git.kernel.org/stable/c/d352873bbefa7eb39995239d0b44ccdf8aaa79a4
git	www.git.kernel.org/stable/c/5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc

17 Jun 2026 10:21Current

CVSS 3.17.8

EPSS0.00184