SB2026060432 - Improper Check or Handling of Exceptional Conditions in Linux kernel apparmor

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-46254)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of unaligned memory access in AppArmor dfa table unpacking in security/apparmor/match.c when parsing a crafted AppArmor dfa blob. A local user can supply a specially crafted policy blob to trigger unaligned memory access and cause a denial of service.

The issue can be triggered by dfa tables originating from userspace, and it affects architectures that fault on unaligned memory accesses.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/23f112bd6144e815153462e12d313ac3e7027168
• https://git.kernel.org/stable/c/64802f731214a51dfe3c6c27636b3ddafd003eb0
• https://git.kernel.org/stable/c/cded636008bde2b397a7cf63b8299d7c303aaf6a
• https://git.kernel.org/stable/c/ec737e7fdf2f0ba7b203d4ec72cc915978b10e7e