In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix: limit the number of levels of policy namespaces
Currently the number of policy namespaces is not bounded relying on the user namespace limit. However policy namespaces aren't strictly tied to user namespaces and it is possible to create them and nest them arbitrarily deep which can be used to exhaust system resource.
Hard cap policy namespaces to the same depth as user namespaces.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 2, 2026 | Apr 2, 2026 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1184-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-virtualUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azureUpgrade linux-image-raspi-5.4Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.4.0-1139-raspiUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-4.15.0-2129-aws-fipsUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-4.15.0-2092-gcp-fipsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-4.15.0-1173-kvmUpgrade linux-image-oem-6.17Upgrade linux-image-raspi2Upgrade linux-image-oem-24.04aUpgrade linux-image-4.15.0-249-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04dUpgrade linux-image-xilinxUpgrade linux-image-aws-fipsUpgrade linux-image-azure-5.4Upgrade linux-image-6.17.0-1017-oemUpgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-4.15.0-1146-fipsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-oracle-4.15Upgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-bluefieldUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-4.15Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-fipsUpgrade linux-image-4.15.0-249-lowlatencyUpgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-4.15.0-1191-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1029-xilinx | Apr 3, 2026 | Apr 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub