Vulnerability in Linux
CVE-2026-23407
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only checks DEFAULT_TABLE bounds when the state is not differentially encod…
EPSS: 0.000 (0.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3, 4.17, 0
References
- git.kernel.org/stable/c/555829fd91eaf0711e369b0a92aecb0f0aa3281f
- git.kernel.org/stable/c/a75e12ca90c9e70ba10fee1be2f63cdd63d91a7c
- git.kernel.org/stable/c/22094c996968a7c5b59cd3fc9fcbdfdd46d02fec
- git.kernel.org/stable/c/7c7cf05e0606f554c467e3a4dc49e2e578a755b4
- git.kernel.org/stable/c/76b4d36c5122866452d34d8f79985e191f9c3831
- git.kernel.org/stable/c/5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc
- git.kernel.org/stable/c/f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed
- git.kernel.org/stable/c/d352873bbefa7eb39995239d0b44ccdf8aaa79a4
Frequently asked questions
- What is CVE-2026-23407?
- CVE-2026-23407 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-04-01.
- How severe is CVE-2026-23407?
- High severity. CVSS v3 base score is 7.8 out of 10.