EUVD-2026-81839

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verifytags bounds check verifytags validates the tagset table unpacked from a policy blob. For each set it reads a count and checks that advancing the index by that count stays inside sets.table:...

CVE-2026-90246

An integer overflow in the Linux kernel's AppArmor subsystem, specifically in verify_tags(), allows a crafted policy blob to bypass a bounds check. The check computes i + cnt using u32 arithmetic , so a count near U32_MAX wraps the sum to zero, letting the inner loop read past the end of the allo...