Skip to content
OpenAdvisories
Medium WID-SEC-2026-0950 11 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Mar 31, 2026 · Updated Oct 4, 2026 · Revision 41 · de-DE

Vendor: Debian Vendor: Dell Vendor: Google Vendor: IBM Vendor: Microsoft Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Azure Linux Product: Container-Optimized OS Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: openSUSE Product: Rocky Linux Product: Secure Connect Gateway Product: Security Verify Access Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, darunter möglicherweise Codeausführung, Denial-of-Service-Angriffe, die Umgehung von Sicherheitsmaßnahmen oder die Manipulation von Daten.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 11

  • High 8.1
    CVE-2026-23401

    KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so *after* dropping/zapping the existing SPTE (if it's shadow-present). …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23406

    apparmor: fix side-effect bug in match_char() macro usage

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluates its character parameter multiple times when traversing differential encoding chains. When invoked wi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23407

    apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only checks DEFAULT_TABLE bounds when the state is not differentially encoded. When the verificat…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23408

    apparmor: Fix double free of ns_name in aa_replace_profiles()

    In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_profiles() if ns_name is NULL after 1071 error = aa_unpack(udata, &lh, &ns_name); and if ent->ns_name contains an ns_name in 1089 } else if …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23410

    apparmor: fix race on rawdata dereference

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: because the rawdata inodes are not refcounted, an attacker can start open()ing on…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23411

    apparmor: fix race between freeing data and fs accessing it

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private data on its end after removing the original entry from the file system. However the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23402

    KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against overwriting a shadow-present SPTE with a another SPTE with a different target PFN…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-23403

    apparmor: fix memory leak in verify_header

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. Thi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23404

    apparmor: replace recursive profile removal with iterative approach

    In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23405

    apparmor: fix: limit the number of levels of policy namespaces

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of policy namespaces is not bounded relying on the user namespace limit. However policy namespaces aren't s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23409

    apparmor: fix differential encoding verification

    In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification Differential encoding allows loops to be created if it is abused. To prevent this the unpack should verify that a diff-encode chain terminates…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #41

    Neue Updates von IBM aufgenommen

  2. #40

    Neue Updates von Ubuntu aufgenommen

  3. #39

    Neue Updates von Dell aufgenommen

  4. #38

    Neue Updates von Dell aufgenommen

  5. #37

    Neue Updates von Ubuntu aufgenommen

  6. #36

    Neue Updates von Ubuntu aufgenommen

  7. #35

    Neue Updates von Ubuntu aufgenommen

  8. #34

    Neue Updates von Ubuntu aufgenommen

  9. #33

    Neue Updates von Ubuntu aufgenommen

  10. #32

    Neue Updates von Ubuntu aufgenommen

  11. #31

    Neue Updates von Oracle Linux aufgenommen

  12. #30

    Neue Updates von Ubuntu aufgenommen

  13. #29

    Neue Updates von Ubuntu aufgenommen

  14. #28

    Neue Updates von Red Hat aufgenommen

  15. #27

    Neue Updates von Oracle Linux aufgenommen

  16. #26

    Neue Updates von Oracle Linux aufgenommen

  17. #25

    Neue Updates von SUSE aufgenommen

  18. #24

    Neue Updates von SUSE aufgenommen

  19. #23

    Neue Updates von SUSE aufgenommen

  20. #22

    Neue Updates von openSUSE und SUSE aufgenommen

  21. #21

    Neue Updates von SUSE aufgenommen

  22. #20

    Neue Updates von Red Hat aufgenommen

  23. #19

    Neue Updates von Oracle Linux aufgenommen

  24. #18

    Neue Updates von Red Hat aufgenommen

  25. #17

    Neue Updates von Red Hat aufgenommen

References