In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix: limit the number of levels of policy namespaces
Currently the number of policy namespaces is not bounded relying on the user namespace limit. However policy namespaces aren't strictly tied to user namespaces and it is possible to create them and nest them arbitrarily deep which can be used to exhaust system resource.
Hard cap policy namespaces to the same depth as user namespaces.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 2, 2026 | Apr 2, 2026 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1184-gcpUpgrade linux-image-oem-6.17Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1173-kvmUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-249-genericUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-4.15.0-2129-aws-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-aws-fips-4.15Upgrade linux-image-4.15.0-2092-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-5.4Upgrade linux-image-azure-4.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-oem-24.04cUpgrade linux-image-azure-cvmUpgrade linux-image-xilinxUpgrade linux-image-oem-24.04dUpgrade linux-image-azure-5.15Upgrade linux-image-5.4.0-1139-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-aws-hweUpgrade linux-image-oracle-4.15Upgrade linux-image-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-4.15Upgrade linux-image-6.17.0-1017-oemUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-1191-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1146-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-aws-fipsUpgrade linux-image-azure-5.4Upgrade linux-image-bluefield-5.4Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-4.15.0-249-lowlatencyUpgrade linux-image-gcp-4.15Upgrade linux-image-generic | Apr 3, 2026 | Apr 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 1, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub