CVE-2026-45965

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix invalid deref of rawdata when export_binary is unset

If the export_binary parameter is disabled on runtime, profiles that

were loaded before that will still have their rawdata stored in

apparmorfs, with a symbolic link to the rawdata on the policy

directory. When one of those profiles are replaced, the rawdata is set

to NULL, but when trying to resolve the symbolic links to rawdata for

that profile, it will try to dereference profile->rawdata->name when

profile->rawdata is now NULL causing an oops. Fix it by checking if

rawdata is set.

[ 168.653080] BUG: kernel NULL pointer dereference, address: 0000000000000088

[ 168.657420] #PF: supervisor read access in kernel mode

[ 168.660619] #PF: error_code(0x0000) - not-present page

[ 168.663613] PGD 0 P4D 0

[ 168.665450] Oops: Oops: 0000 [#1] SMP NOPTI

[ 168.667836] CPU: 1 UID: 0 PID: 1729 Comm: ls Not tainted 6.19.0-rc7+ #3 PREEMPT(voluntary)

[ 168.672

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References