CVE-2026-23411 Details
Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private data on its end after removing the original entry from the file system. However the inode can aand does live beyond that point and it is possible that some of the fs call back functions will be invoked after the reference has been put, which results in a race between freeing the data and accessing it through the fs. While the rawdata/loaddata is the most likely candidate to fail the race, as it has the fewest references. If properly crafted it might be possible to trigger a race for the other types stored in i_private. Fix this by moving the put of i_private referenced data to the correct place which is during inode eviction.
A race condition vulnerability has been identified in the Linux kernel's AppArmor implementation. This issue arises because AppArmor releases its reference to 'i_private' data after removing the corresponding entry from the filesystem. However, the inode can persist beyond this point, potentially allowing some filesystem callback functions to be invoked after the reference has been dropped. This creates a race between deallocating the data and accessing it through the filesystem. The 'rawdata/loaddata' is particularly susceptible to this race, as it has the fewest references. If crafted correctly, it could also affect other data types stored in 'i_private'. The vulnerability has been addressed by adjusting the timing of when the 'i_private' referenced data is released, ensuring it occurs during inode eviction.
Users should update to the latest stable version of the Linux kernel where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/13bc2772414d68e94e273dea013181a986948ddf | kernel.org | Patch |
| https://git.kernel.org/stable/c/2a732ed26fbd048e7925d227af8cf9ea43fb5cc9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3ddb961d2929bbb3204a2bba21b5d8153cd3f7cc | kernel.org | Patch |
| https://git.kernel.org/stable/c/667df93769c02ff581c77d2d8f162147e719c557 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8e135b8aee5a06c52a4347a5a6d51223c6f36ba3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a92c5e5086a87d082696245a8607666da3d80554 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae10787d955fb255d381e0d5589451dd72c614b1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/eecce026399917f6efa532c56bc7a3e9dd6ee68b | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.13.1, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.169 >= 6.2, < 6.6.130 >= 6.7, < 6.12.77 >= 6.13, < 6.18.18 >= 6.19, < 6.19.8 4.13 - 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 24, 2026 | Initial Analysis | [email protected] |
| Apr 18, 2026 | CVE Modified | kernel.org |
| Apr 2, 2026 | CVE Modified | kernel.org |
| Apr 1, 2026 | New CVE Received | kernel.org |