vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-45893

apparmor: Fix & Optimize table creation from possibly unaligned memory

HIGH
7.1
CVSS Score
Published: May 27, 2026 at 12:17 PM UTC
Updated: October 21, 2026 at 01:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.1
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from userspace and might be unaligned. Try to optize the copying process by avoiding unaligned memory accesses. - Added Fixes tag - Added "Fix &" to description as this doesn't just optimize but fixes a potential unaligned memory access [jj: remove duplicate word "convert" in comment trigger checkpatch warning]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.11 ≤ v < 6.12.756.13 ≤ v < 6.18.146.19 ≤ v < 6.19.44.11e6e8bf418850d7958311a96ccfb594f2bcc8313e
Vendor states this is fixed in 226c3b10aab23f73b03c47e7773107de56ba3a4e (fixed)
Vendor states this is fixed in 47e351dfef60ab0e3285133556e1a9c7f646a969 (fixed)
Vendor states this is fixed in 6fc367bfd4c8886e6b1742aabbd1c0bdc310db3a (fixed)
Vendor states this is fixed in e027999049c493fb728ead5a90db76942181a935 (fixed)
Vendor states this is fixed in 4.11 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

References (5)

Patch
Source: cverecord
https://git.kernel.org/stable/c/47e351dfef60ab0e3285133556e1a9c7f646a969
Patch
Source: cverecord
https://git.kernel.org/stable/c/e027999049c493fb728ead5a90db76942181a935
Patch
Source: cverecord
https://git.kernel.org/stable/c/226c3b10aab23f73b03c47e7773107de56ba3a4e
Patch
Source: cverecord
https://git.kernel.org/stable/c/6fc367bfd4c8886e6b1742aabbd1c0bdc310db3a
Source: cverecord
https://git.kernel.org/stable/c/1fbc4b24c7443ffd501609be74d9856fb940d703

CVSS

7.1HIGH[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card