CVE-2026-23405
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
apparmor: fix: limit the number of levels of policy namespaces
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of policy namespaces is not bounded relying on the user namespace limit. However policy namespaces aren't strictly tied to user namespaces and it is possible to create them and nest them arbitrarily deep which can be used to exhaust system resource. Hard cap policy namespaces to the same depth as user namespaces.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 6b396cc2f0365e684fc1d3547d18ef79fcee225d | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 87d0cecc900e55d55fc4dbfb43ac93e269c7a5b3 | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | b1226e37eb3754d389721c135db6107db94c7a72 | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 3f8699b3ee0c04b4b9bc27b82cd89a40e81e1d2e | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 853ce31ca72097d23991a06876a2ccb5cb64b603 | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | d42b2b6bb77ca40ee34ab74ad79305840b5f315d | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 7b6495ead2c611647f6b11441a852324e3eb8616 | Unavailable | None listed |
| c88d4c7b049e87998ac0a9f455aa545cc895ef92 | affected | git | 306039414932c80f8420695a24d4fe10c84ccfb2 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.36 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.36 | Unavailable | None listed |
| 5.10.253 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.203 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.169 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.130 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.77 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.18 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19.8 | unaffected | semver | Unavailable | 6.19.* | None listed |
| 7.0 | unaffected | original_commit_for_fix | Unavailable | * | None listed |