Vulnerability in Linux
CVE-2026-23410
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker…
EPSS: 0.000 (0.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 5d5182cae40115c03933989473288e54afb39c7c, 4.13, 0
References
- git.kernel.org/stable/c/3b8e77c7abab40e6de9ad9de730d77984a498840
- git.kernel.org/stable/c/d9d8560b9b7932f8cffc4c068c14289220900f79
- git.kernel.org/stable/c/6b6ba87579c7e7c669e0bec91823e7fb693bc5df
- git.kernel.org/stable/c/6ef1f2926c41ab96952d9696d55a052f1b3a9418
- git.kernel.org/stable/c/f9761add6d100962a23996cb68f3d6abdd4d1815
- git.kernel.org/stable/c/af782cc8871e3683ddd5a3cd2f7df526599863a9
- git.kernel.org/stable/c/763e838adc3c7ec5a7df2990ce84cad951e42721
- git.kernel.org/stable/c/a0b7091c4de45a7325c8780e6934a894f92ac86b
Frequently asked questions
- What is CVE-2026-23410?
- CVE-2026-23410 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-04-01.
- How severe is CVE-2026-23410?
- High severity. CVSS v3 base score is 7.8 out of 10.