Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-23404: Linux kernel AppArmor may crash on deep profile removal
CVE-2026-23404 · published 7 months ago
Summary
On Ubuntu and related Canonical Linux variants, removing a large number of nested AppArmor security profiles could exhaust the kernel’s internal memory stack and cause the system to freeze or crash. The problem occurs when the removal process uses a recursive method that can’t handle very deep profile trees. Updating to a kernel version that uses an iterative removal method fixes the issue, so apply the latest kernel updates for your system.
What to do
- Update canonical linux-azure to version 4.15.0-1200.215~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1191.204~16.04.1.
- Update canonical linux-azure to version 4.15.0-1200.215~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1184.201~16.04.1.
- Update canonical linux-hwe to version 4.15.0-249.261~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1153.164~16.04.1.
- Update canonical linux to version 4.15.0-249.261.
- Update canonical linux-aws to version 4.15.0-1191.204.
- Update canonical linux-aws-5.4 to version 5.4.0-1156.166~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1200.215.
- Update canonical linux-azure-5.4 to version 5.4.0-1161.167~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1184.201.
- Update canonical linux-gcp-5.4 to version 5.4.0-1159.168~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-227.247~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1102.107~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1173.178.
- Update canonical linux-oracle to version 4.15.0-1153.164.
- Update canonical linux-oracle-5.4 to version 5.4.0-1154.164~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1139.152~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2129.135.
- Update canonical linux-azure-fips to version 4.15.0-2109.115.
- Update canonical linux-fips to version 4.15.0-1146.158.
- Update canonical linux-gcp-fips to version 4.15.0-2092.98.
- Update canonical linux to version 5.4.0-227.247.
- Update canonical linux-aws to version 5.4.0-1156.166.
- Update canonical linux-aws-5.15 to version 5.15.0-1103.110~20.04.1.
- Update canonical linux-azure to version 5.4.0-1160.166.
- Update canonical linux-azure-5.15 to version 5.15.0-1110.119~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1116.123.
- Update canonical linux-gcp to version 5.4.0-1159.168.
- Update canonical linux-gcp-5.15 to version 5.15.0-1103.112~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-173.183~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1102.107.
- Update canonical linux-ibm-5.15 to version 5.15.0-1097.100~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1098.104~20.04.1.
- Update canonical linux-iot to version 5.4.0-1060.63.
- Update canonical linux-kvm to version 5.4.0-1143.152.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-173.183~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1055.55~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1154.164.
- Update canonical linux-oracle-5.15 to version 5.15.0-1100.106~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1139.152.
- Update canonical linux-riscv-5.15 to version 5.15.0-1098.102~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1074.78.
- Update canonical linux-aws-fips to version 5.4.0-1156.166+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1160.166+fips1.
- Update canonical linux-fips to version 5.4.0-1130.140.
- Update canonical linux-gcp-fips to version 5.4.0-1159.168+fips1.
- Update canonical linux to version 5.15.0-173.183.
- Update canonical linux-aws to version 5.15.0-1103.110.
- Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
- Update canonical linux-azure to version 5.15.0-1109.118.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1103.112.
- Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
- Update canonical linux-gke to version 5.15.0-1099.105.
- Update canonical linux-gkeop to version 5.15.0-1086.94.
- Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1097.100.
- Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1098.104.
- Update canonical linux-kvm to version 5.15.0-1095.100.
- Update canonical linux-lowlatency to version 5.15.0-173.183.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1098.99.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1055.55.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1044.44.
- Update canonical linux-oracle to version 5.15.0-1100.106.
- Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1097.100.
- Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1067.71.
- Update canonical linux-bluefield to version 5.15.0-1087.89.
- Update canonical linux-aws-fips to version 5.15.0-1103.110+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-fips to version 5.15.0-173.183+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1103.112+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1096.98.
- Update canonical linux-realtime to version 5.15.0-1102.111.
- Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
- Update canonical linux to version 6.8.0-106.106.
- Update canonical linux-aws to version 6.8.0-1050.53.
- Update canonical linux-aws-6.17 to version 6.17.0-1009.9~24.04.2.
- Update canonical linux-azure to version 6.8.0-1051.57.
- Update canonical linux-azure-6.17 to version 6.17.0-1010.10~24.04.1.
- Update canonical linux-gcp to version 6.8.0-1052.55.
- Update canonical linux-gcp-6.17 to version 6.17.0-1009.9~24.04.3.
- Update canonical linux-gke to version 6.8.0-1048.53.
- Update canonical linux-gkeop to version 6.8.0-1035.38.
- Update canonical linux-hwe-6.17 to version 6.17.0-19.19~24.04.2.
- Update canonical linux-ibm to version 6.8.0-1049.49.
- Update canonical linux-lowlatency to version 6.8.0-106.106.1.
- Update canonical linux-nvidia to version 6.8.0-1049.52.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1014.14.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-oem-6.17 to version 6.17.0-1017.17.
- Update canonical linux-oracle to version 6.8.0-1047.48.
- Update canonical linux-oracle-6.17 to version 6.17.0-1009.9~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1050.54.
- Update canonical linux-riscv-6.17 to version 6.17.0-19.19.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1028.29.
- Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
- Update canonical linux-fips to version 6.8.0-106.106+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
- Update canonical linux-realtime to version 6.8.1-1045.46.
- Update canonical linux-realtime-6.17 to version 6.17.0-1008.9~24.04.1.
- Update canonical linux to version 6.17.0-19.19.
- Update canonical linux-aws to version 6.17.0-1009.9.
- Update canonical linux-azure to version 6.17.0-1010.10.
- Update canonical linux-gcp to version 6.17.0-1009.9.
- Update canonical linux-oracle to version 6.17.0-1009.9.
- Update canonical linux-raspi to version 6.17.0-1010.10.
- Update canonical linux-realtime to version 6.17.0-1008.9.
- Update canonical linux-riscv to version 6.17.0-19.19.1.
- Update bellsoft linux-lts to version 6.1.170-r0.
- Update debian linux to version 5.10.251-1.
- Update debian linux to version 6.1.164-1.
- Update debian linux to version 6.12.74-2.
- Update debian linux to version 6.19.6-2.
- Update bellsoft linux-lts to version 6.12.80-r0.
- Update canonical linux-azure-fde to version 5.15.0-1109.118.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update canonical linux-bluefield to version 6.8.0-1017.21.
- Update linux kernel to version 6.19.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1200.215~14.04.1 Fix: upgrade to 4.15.0-1200.215~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1191.204~16.04.1 Fix: upgrade to 4.15.0-1191.204~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1200.215~16.04.1 Fix: upgrade to 4.15.0-1200.215~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1184.201~16.04.1 Fix: upgrade to 4.15.0-1184.201~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-249.261~16.04.1 Fix: upgrade to 4.15.0-249.261~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1153.164~16.04.1 Fix: upgrade to 4.15.0-1153.164~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-249.261 Fix: upgrade to 4.15.0-249.261
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1191.204 Fix: upgrade to 4.15.0-1191.204
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1156.166~18.04.1 Fix: upgrade to 5.4.0-1156.166~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1200.215 Fix: upgrade to 4.15.0-1200.215
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1161.167~18.04.1 Fix: upgrade to 5.4.0-1161.167~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1184.201 Fix: upgrade to 4.15.0-1184.201
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1159.168~18.04.1 Fix: upgrade to 5.4.0-1159.168~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-227.247~18.04.1 Fix: upgrade to 5.4.0-227.247~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1102.107~18.04.1 Fix: upgrade to 5.4.0-1102.107~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1173.178 Fix: upgrade to 4.15.0-1173.178
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1153.164 Fix: upgrade to 4.15.0-1153.164
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1154.164~18.04.1 Fix: upgrade to 5.4.0-1154.164~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1139.152~18.04.1 Fix: upgrade to 5.4.0-1139.152~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2129.135 Fix: upgrade to 4.15.0-2129.135
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2109.115 Fix: upgrade to 4.15.0-2109.115
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1146.158 Fix: upgrade to 4.15.0-1146.158
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2092.98 Fix: upgrade to 4.15.0-2092.98
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux |
< 5.4.0-227.247 Fix: upgrade to 5.4.0-227.247
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws |
< 5.4.0-1156.166 Fix: upgrade to 5.4.0-1156.166
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
Showing 50 of 234. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1103.110~20.04.1 Fix: upgrade to 5.15.0-1103.110~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure |
< 5.4.0-1160.166 Fix: upgrade to 5.4.0-1160.166
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1110.119~20.04.1 Fix: upgrade to 5.15.0-1110.119~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1116.123 Fix: upgrade to 5.4.0-1116.123
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1159.168 Fix: upgrade to 5.4.0-1159.168
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1103.112~20.04.1 Fix: upgrade to 5.15.0-1103.112~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-173.183~20.04.1 Fix: upgrade to 5.15.0-173.183~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1102.107 Fix: upgrade to 5.4.0-1102.107
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1097.100~20.04.1 Fix: upgrade to 5.15.0-1097.100~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1098.104~20.04.1 Fix: upgrade to 5.15.0-1098.104~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot |
< 5.4.0-1060.63 Fix: upgrade to 5.4.0-1060.63
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1143.152 Fix: upgrade to 5.4.0-1143.152
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-173.183~20.04.1 Fix: upgrade to 5.15.0-173.183~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1055.55~20.04.1 Fix: upgrade to 5.15.0-1055.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1154.164 Fix: upgrade to 5.4.0-1154.164
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1100.106~20.04.1 Fix: upgrade to 5.15.0-1100.106~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1139.152 Fix: upgrade to 5.4.0-1139.152
|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1098.102~20.04.1 Fix: upgrade to 5.15.0-1098.102~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1074.78 Fix: upgrade to 5.4.0-1074.78
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1156.166+fips1 Fix: upgrade to 5.4.0-1156.166+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1160.166+fips1 Fix: upgrade to 5.4.0-1160.166+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1130.140 Fix: upgrade to 5.4.0-1130.140
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1159.168+fips1 Fix: upgrade to 5.4.0-1159.168+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-173.183 Fix: upgrade to 5.15.0-173.183
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1103.110 Fix: upgrade to 5.15.0-1103.110
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1050.53~22.04.1 Fix: upgrade to 6.8.0-1050.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1103.112 Fix: upgrade to 5.15.0-1103.112
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1052.55~22.04.1 Fix: upgrade to 6.8.0-1052.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1099.105 Fix: upgrade to 5.15.0-1099.105
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1086.94 Fix: upgrade to 5.15.0-1086.94
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1049.49~22.04.1 Fix: upgrade to 6.8.0-1049.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1098.104 Fix: upgrade to 5.15.0-1098.104
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1095.100 Fix: upgrade to 5.15.0-1095.100
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-173.183 Fix: upgrade to 5.15.0-173.183
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-106.106.1~22.04.1 Fix: upgrade to 6.8.0-106.106.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1098.99 Fix: upgrade to 5.15.0-1098.99
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1049.52~22.04.1 Fix: upgrade to 6.8.0-1049.52~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1055.55 Fix: upgrade to 5.15.0-1055.55
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1044.44 Fix: upgrade to 5.15.0-1044.44
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1100.106 Fix: upgrade to 5.15.0-1100.106
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1047.48~22.04.1 Fix: upgrade to 6.8.0-1047.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1067.71 Fix: upgrade to 5.15.0-1067.71
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1087.89 Fix: upgrade to 5.15.0-1087.89
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1103.110+fips1 Fix: upgrade to 5.15.0-1103.110+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-173.183+fips1 Fix: upgrade to 5.15.0-173.183+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1103.112+fips1 Fix: upgrade to 5.15.0-1103.112+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1096.98 Fix: upgrade to 5.15.0-1096.98
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1102.111 Fix: upgrade to 5.15.0-1102.111
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1045.46~22.04.1 Fix: upgrade to 6.8.1-1045.46~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-106.106 Fix: upgrade to 6.8.0-106.106
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1050.53 Fix: upgrade to 6.8.0-1050.53
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1009.9~24.04.2 Fix: upgrade to 6.17.0-1009.9~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1051.57 Fix: upgrade to 6.8.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 |
< 6.17.0-1010.10~24.04.1 Fix: upgrade to 6.17.0-1010.10~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1052.55 Fix: upgrade to 6.8.0-1052.55
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1009.9~24.04.3 Fix: upgrade to 6.17.0-1009.9~24.04.3
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1048.53 Fix: upgrade to 6.8.0-1048.53
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 |
< 6.17.0-19.19~24.04.2 Fix: upgrade to 6.17.0-19.19~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1049.49 Fix: upgrade to 6.8.0-1049.49
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-106.106.1 Fix: upgrade to 6.8.0-106.106.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1049.52 Fix: upgrade to 6.8.0-1049.52
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1014.14 Fix: upgrade to 6.17.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1049.52.1 Fix: upgrade to 6.8.0-1049.52.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1017.17 Fix: upgrade to 6.17.0-1017.17
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1047.48 Fix: upgrade to 6.8.0-1047.48
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1009.9~24.04.1 Fix: upgrade to 6.17.0-1009.9~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 |
< 6.17.0-19.19.1~24.04.1 Fix: upgrade to 6.17.0-19.19.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1028.29 Fix: upgrade to 6.8.0-1028.29
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1017.21 Fix: upgrade to 6.8.0-1017.21
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1050.53+fips1 Fix: upgrade to 6.8.0-1050.53+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1052.58+fips1 Fix: upgrade to 6.8.0-1052.58+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-106.106+fips1 Fix: upgrade to 6.8.0-106.106+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1052.55+fips1 Fix: upgrade to 6.8.0-1052.55+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2040.41 Fix: upgrade to 6.8.0-2040.41
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1045.46 Fix: upgrade to 6.8.1-1045.46
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1008.9~24.04.1 Fix: upgrade to 6.17.0-1008.9~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-19.19 Fix: upgrade to 6.17.0-19.19
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1010.10 Fix: upgrade to 6.17.0-1010.10
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1010.10 Fix: upgrade to 6.17.0-1010.10
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1008.9 Fix: upgrade to 6.17.0-1008.9
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-19.19.1 Fix: upgrade to 6.17.0-19.19.1
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.168-r0, < 6.1.170-r0 >= 6.1.164-r0 Fix: upgrade to 6.1.170-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.74-r0 >= 6.12.74-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.76-r0 >= 6.12.76-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| – | linux | linux_kernel |
>= 2.6.36.1, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.169 >= 6.2, < 6.6.130 >= 6.7, < 6.12.77 >= 6.13, < 6.18.18 >= 6.19, < 6.19.8 2.6.36 7.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:11 | debian | linux |
< 5.10.251-1 Fix: upgrade to 5.10.251-1
|
| Debian:12 | debian | linux |
< 6.1.164-1 Fix: upgrade to 6.1.164-1
|
| Debian:13 | debian | linux |
< 6.12.74-2 Fix: upgrade to 6.12.74-2
|
| Debian:14 | debian | linux |
< 6.19.6-2 Fix: upgrade to 6.19.6-2
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1109.118.1 Fix: upgrade to 5.15.0-1109.118.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Linux | linux | kernel |
>= 6.19.0, < 6.19.8 Fix: upgrade to 6.19.8
|
Original advisory text
apparmor: replace recursive profile removal with iterative approach
In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for ((i=0; i<1024; i++)); do echo -e "profile $pf { \n }" | apparmor_parser -K -a; pf="$pf//x"; done $ echo -n a > /sys/kernel/security/apparmor/.remove Replace the recursive __aa_profile_list_release() approach with an iterative approach in __remove_profile(). The function repeatedly finds and removes leaf profiles until the entire subtree is removed, maintaining the same removal semantic without recursion.
References
- https://git.kernel.org/stable/c/ab09264660f9de5d05d1ef4e225aa447c63a8747 URL
- https://docs.bell-sw.com/security/cves/CVE-2026-23404 Vendor Advisory
- https://git.kernel.org/stable/c/4fdc847b107321dec22bf8ecd6019b7af76d7886 URL
- https://git.kernel.org/stable/c/b36a04284d0208be94e5e401409caa00e2bf1be1 URL
- https://git.kernel.org/stable/c/ea854f032190cc9f26dc4a0e727090c89e55e342 URL
- https://security-tracker.debian.org/tracker/CVE-2026-23404 Vendor Advisory
- https://git.kernel.org/stable/c/7eade846e013cbe8d2dc4a484463aa19e6515c7f URL
- https://git.kernel.org/stable/c/999bd704b0b641527a5ed46f0d969deff8cfa68b URL
- https://git.kernel.org/stable/c/a6a941a1294ac5abe22053dc501d25aed96e48fe URL
- https://git.kernel.org/stable/c/33959a491e9fd557abfa5fce5ae4637d400915d3 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23404... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23404 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2026-23404 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23404 Third Party Advisory
- https://ubuntu.com/blog/apparmor-vulnerability-fixes-available Third Party Advisory
- https://ubuntu.com/security/vulnerabilities/crackarmor Third Party Advisory
- https://cdn2.qualys.com/advisory/2026/03/10/crack-armor.txt Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/04/01/3 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8152-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8164-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8165-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8098-10 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8201-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8224-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8243-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8261-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8266-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8267-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Apr 2026
Updated29 Oct 2026
First seen1 Apr 2026
Sources
DEBIAN-CVE-2026-23404 · OSV
CVE-2026-23404 · NVD
BELL-CVE-2026-23404 · OSV
UBUNTU-CVE-2026-23404 · OSV
CVE-2026-23404 · OSV
Track software like this
Free during beta