Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-23403

20
FAUCET Score

CVE-2026-23403 addresses a memory leak vulnerability within the Linux kernel's AppArmor component, specifically in the `verify_header` function. This flaw causes namespace strings to leak when multiple profiles are unpacked, additionally disrupting namespace consistency checking. While specific CVSS and FAUCET risk scores are unavailable, the issue primarily affects resource management and potential policy integrity rather than providing a direct path to remote code execution or privilege escalation. There is no evidence of active exploitation, no public exploit code is available, and community discussion remains limited to security mailing lists.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.12.1, < 5.10.253CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.203CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.169CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.130CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.77CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.18%
Probability of exploitation in next 30 days
EPSS Percentile
7.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0018 is in the 40th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

microsoftpatch availablevia msrc
Product: 21172-17084Fixed in: 6.6.130.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 0.0.0-1 on Azure Linux 3.0Fixed in: 6.6.130.1-1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (xenial)Fixed in: 4.15.0-1153.164~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (bionic)Fixed in: 4.15.0-249.261
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (bionic)Fixed in: 4.15.0-1191.204
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (bionic)Fixed in: 4.15.0-2129.135
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-4.15 (bionic)Fixed in: 4.15.0-1200.215
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (bionic)Fixed in: 4.15.0-1146.158
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-4.15 (bionic)Fixed in: 4.15.0-1184.201
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (bionic)Fixed in: 4.15.0-2092.98
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (bionic)Fixed in: 4.15.0-1173.178
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (bionic)Fixed in: 4.15.0-1153.164
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-hwe (xenial)Fixed in: 4.15.0-1191.204~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (xenial)Fixed in: 4.15.0-1184.201~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe (xenial)Fixed in: 4.15.0-249.261~16.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-bluefield (focal)Fixed in: 5.4.0-1116.123
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-5.15 (focal)Fixed in: 5.15.0-1110.119~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1029.30
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-6.17 (noble)Fixed in: 6.17.0-1017.17
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1052.58+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1096.98
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (jammy)Fixed in: 5.15.0-1109.118+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (bionic)Fixed in: 4.15.0-2109.115
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (jammy)Fixed in: 5.15.0-1109.118
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (xenial)Fixed in: 4.15.0-1200.215~16.04.1

Vendor Advisories (11)

ubuntuUSN-8267-1

Linux kernel vulnerabilities

May 11, 2026
ubuntuUSN-8266-1

Linux kernel vulnerabilities

May 11, 2026
ubuntuUSN-8261-1

Linux kernel (Xilinx) vulnerabilities

May 7, 2026
ubuntuUSN-8243-1

Linux kernel (Azure) vulnerabilities

May 7, 2026
ubuntuUSN-8224-1

Linux kernel (BlueField) vulnerabilities

Apr 29, 2026
ubuntuUSN-8163-2

Linux kernel (Azure) vulnerabilities

Apr 13, 2026
ubuntuUSN-8165-1

Linux kernel (Azure FIPS) vulnerabilities

Apr 9, 2026
ubuntuUSN-8164-1

Linux kernel (Intel IoTG Real-time) vulnerabilities

Apr 9, 2026
ubuntuUSN-8163-1

Linux kernel (Azure FIPS) vulnerabilities

Apr 9, 2026
ubuntuUSN-8152-1

Linux kernel (OEM) vulnerabilities

Apr 6, 2026
microsoft2026-Apr/CVE-2026-23403Moderate

apparmor: fix memory leak in verify_header

Apr 2, 2026

References

git.kernel.org / stable/c/42fd831abfc15d0643c14688f0522556b347e7e6
Patch
git.kernel.org / stable/c/4f0889f2df1ab99224a5e1ac4e20437eea5fe38e
Patch
git.kernel.org / stable/c/663ce34786e759ebcbeb3060685c20bcc886d51a
Patch
git.kernel.org / stable/c/6b79abcb3c985e153fcf9d395e1d4336081aabc2
Patch
git.kernel.org / stable/c/786e2c2a87d9c505f33321d1fd23a176aa8ddeb1
Patch
git.kernel.org / stable/c/9d678eb0fe55c9195d9a253e8c5b82a87b930737
Patch
git.kernel.org / stable/c/bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557
Patch
git.kernel.org / stable/c/e38c55d9f834e5b848bfed0f5c586aaf45acb825
Patch