Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: AppArmor: Avoid per-cpu hold underflow in aagetbuffer. When aagetbuffer retrieves data from the per-cpu list, it conditionally decreases cache-hold. If hold reaches 0 while count remains non-zero, the unsigned decrement wraps to...

CVE-2026-45884

Summary of CVE-2026-45884 (Linux kernel, AppArmor): The issue is an integer underflow in aa_get_buffer() when dequeuing from the per-CPU list. If cache->hold drops to zero while count is non-zero, the unsigned decrement can wrap to UINT_MAX, keeping hold non-zero and causing aa_put_buffer() to...

PT-2026-43751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the aa get buffer function unconditionally decrements the cache-hold variable when pulling from the per-cpu list. If hold reaches 0 while cou...