CVE-2026-46055

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix string overrun due to missing termination

When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm

Snapdragon X1 we see a string buffer overrun:

BUG: KASAN: slab-out-of-bounds in aa_dfa_match (security/apparmor/match.c:535)

Read of size 1 at addr ffff0008901cc000 by task snap-update-ns/2120

CPU: 5 UID: 60578 PID: 2120 Comm: snap-update-ns Not tainted 7.0.0-rc4+ #22 PREEMPTLAZY

Hardware name: LENOVO 83ED/LNVNB161216, BIOS NHCN60WW 09/11/2025

Call trace:

show_stack (arch/arm64/kernel/stacktrace.c:501) (C)

dump_stack_lvl (lib/dump_stack.c:122)

print_report (mm/kasan/report.c:379 mm/kasan/report.c:482)

kasan_report (mm/kasan/report.c:597)

__asan_report_load1_noabort (mm/kasan/report_generic.c:378)

aa_dfa_match (security/apparmor/match.c:535)

match_mnt_path_str (security/apparmor/mount.c:244 security/apparmor/mount.c:336)

match_mnt (security/apparmor/mount.c:371)

aa_bind_mount (security/apparmor/m

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References