CVE-2026-89761

A flaw was found in the Linux kernel's AppArmor security module. An out-of-bounds write vulnerability exists when null terminating a label vector due to improper memory allocation. An unprivileged local attacker can exploit this by writing to specific system files, potentially leading to a denial...

CVE-2026-89761

CVE-2026-89761 is an out-of-bounds write in the Linux kernel's AppArmor LSM. The root cause is that vec_setup() does not reserve the null-terminator entry required by aa_vec_unique() when VEC_FLAG_TERMINATE is passed, causing a write one slot past the end of the local array or heap allocation. An...

PT-2026-90477

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa vec unique null terminates at vecn - dups when VEC FLAG TERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...