Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for ((i=0; i<1024; i++)); do echo -e "profile $pf { \n }" | apparmor_parser -K -a; pf="$pf//x"; done $ echo -n a > /sys/kernel/security/apparmor/.remove Replace the recursive __aa_profile_list_release() approach with an iterative approach in __remove_profile(). The function repeatedly finds and removes leaf profiles until the entire subtree is removed, maintaining the same removal semantic without recursion.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-01 | 2 | Disclosure1Patch1 |
| 2026-04-10 | 1 | Patch1 |
CVE-2026-23404 In the Linux kernel, the following vulnerability has been resolve... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23404 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A brief notification that CVE-2026-23404 has been resolved in the Linux kernel, with a reference link for more information.
🛡️ AppArmor saving Linux from its own recursive doom. Meanwhile Microsoft will fix the symptom… after your server faceplants. Kernel hardening > vibes, every time. #CVE #Security https://windowsforum.com/threads/cve-2026-23404-apparmor-kernel-fix-recursive-profile-removal-prevents-dos.411364/ #DenialOfService #ApparmorSecurity #Cve202623404 #LinuxKernelHardening
Post summary
The tweet highlights that Microsoft plans to release a fix for CVE‑2026‑23404, but offers no technical details or proof‑of‑concept, and does not discuss exploitation or alternative responses.
CVE-2026-23404 In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code use… https://www.cve.org/CVERecord?id=CVE-2026-23404
Post summary
The Linux kernel CVE‑2026‑23404 has been fixed by replacing the recursive profile removal method in AppArmor with an iterative approach, indicating the vulnerability has been patched.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 2.6.36 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |