{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46254", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.107Z", "datePublished": "2026-06-03T15:49:50.994Z", "dateUpdated": "2026-06-03T15:49:50.994Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-03T15:49:50.994Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nAppArmor: Allow apparmor to handle unaligned dfa tables\n\nThe dfa tables can originate from kernel or userspace and 8-byte alignment\nisn't always guaranteed and as such may trigger unaligned memory accesses\non various architectures. Resulting in the following\n\n[\u00a0\u00a0 73.901376] WARNING: CPU: 0 PID: 341 at security/apparmor/match.c:316 aa_dfa_unpack+0x6cc/0x720\n[\u00a0\u00a0 74.015867] Modules linked in: binfmt_misc evdev flash sg drm drm_panel_orientation_quirks backlight i2c_core configfs nfnetlink autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid sr_mod hid cdrom\nsd_mod ata_generic ohci_pci ehci_pci ehci_hcd ohci_hcd pata_ali libata sym53c8xx scsi_transport_spi tg3 scsi_mod usbcore libphy scsi_common mdio_bus usb_common\n[\u00a0\u00a0 74.428977] CPU: 0 UID: 0 PID: 341 Comm: apparmor_parser Not tainted 6.18.0-rc6+ #9 NONE\n[\u00a0\u00a0 74.536543] Call Trace:\n[\u00a0\u00a0 74.568561] [<0000000000434c24>] dump_stack+0x8/0x18\n[\u00a0\u00a0 74.633757] [<0000000000476438>] __warn+0xd8/0x100\n[\u00a0\u00a0 74.696664] [<00000000004296d4>] warn_slowpath_fmt+0x34/0x74\n[\u00a0\u00a0 74.771006] [<00000000008db28c>] aa_dfa_unpack+0x6cc/0x720\n[\u00a0\u00a0 74.843062] [<00000000008e643c>] unpack_pdb+0xbc/0x7e0\n[\u00a0\u00a0 74.910545] [<00000000008e7740>] unpack_profile+0xbe0/0x1300\n[\u00a0\u00a0 74.984888] [<00000000008e82e0>] aa_unpack+0xe0/0x6a0\n[\u00a0\u00a0 75.051226] [<00000000008e3ec4>] aa_replace_profiles+0x64/0x1160\n[\u00a0\u00a0 75.130144] [<00000000008d4d90>] policy_update+0xf0/0x280\n[\u00a0\u00a0 75.201057] [<00000000008d4fc8>] profile_replace+0xa8/0x100\n[\u00a0\u00a0 75.274258] [<0000000000766bd0>] vfs_write+0x90/0x420\n[\u00a0\u00a0 75.340594] [<00000000007670cc>] ksys_write+0x4c/0xe0\n[\u00a0\u00a0 75.406932] [<0000000000767174>] sys_write+0x14/0x40\n[\u00a0\u00a0 75.472126] [<0000000000406174>] linux_sparc_syscall+0x34/0x44\n[\u00a0\u00a0 75.548802] ---[ end trace 0000000000000000 ]---\n[\u00a0\u00a0 75.609503] dfa blob stream 0xfff0000008926b96 not aligned.\n[\u00a0\u00a0 75.682695] Kernel unaligned access at TPC[8db2a8] aa_dfa_unpack+0x6e8/0x720\n\nWork around it by using the get_unaligned_xx() helpers."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/apparmor/match.c"], "versions": [{"version": "e6e8bf418850d7958311a96ccfb594f2bcc8313e", "lessThan": "ec737e7fdf2f0ba7b203d4ec72cc915978b10e7e", "status": "affected", "versionType": "git"}, {"version": "e6e8bf418850d7958311a96ccfb594f2bcc8313e", "lessThan": "23f112bd6144e815153462e12d313ac3e7027168", "status": "affected", "versionType": "git"}, {"version": "e6e8bf418850d7958311a96ccfb594f2bcc8313e", "lessThan": "cded636008bde2b397a7cf63b8299d7c303aaf6a", "status": "affected", "versionType": "git"}, {"version": "e6e8bf418850d7958311a96ccfb594f2bcc8313e", "lessThan": "64802f731214a51dfe3c6c27636b3ddafd003eb0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["security/apparmor/match.c"], "versions": [{"version": "4.11", "status": "affected"}, {"version": "0", "lessThan": "4.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.14", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.4", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "6.18.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "6.19.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.11", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ec737e7fdf2f0ba7b203d4ec72cc915978b10e7e"}, {"url": "https://git.kernel.org/stable/c/23f112bd6144e815153462e12d313ac3e7027168"}, {"url": "https://git.kernel.org/stable/c/cded636008bde2b397a7cf63b8299d7c303aaf6a"}, {"url": "https://git.kernel.org/stable/c/64802f731214a51dfe3c6c27636b3ddafd003eb0"}], "title": "AppArmor: Allow apparmor to handle unaligned dfa tables", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9460E9E9-5019-444D-B0AD-BB3A9C752456", "versionEndExcluding": "6.12.75", "versionStartIncluding": "4.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF463CB7-1F58-4607-B847-77ED23E4B9B7", "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nAppArmor: Allow apparmor to handle unaligned dfa tables\n\nThe dfa tables can originate from kernel or userspace and 8-byte alignment\nisn't always guaranteed and as such may trigger unaligned memory accesses\non various architectures. Resulting in the following\n\n[\u00a0\u00a0 73.901376] WARNING: CPU: 0 PID: 341 at security/apparmor/match.c:316 aa_dfa_unpack+0x6cc/0x720\n[\u00a0\u00a0 74.015867] Modules linked in: binfmt_misc evdev flash sg drm drm_panel_orientation_quirks backlight i2c_core configfs nfnetlink autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid sr_mod hid cdrom\nsd_mod ata_generic ohci_pci ehci_pci ehci_hcd ohci_hcd pata_ali libata sym53c8xx scsi_transport_spi tg3 scsi_mod usbcore libphy scsi_common mdio_bus usb_common\n[\u00a0\u00a0 74.428977] CPU: 0 UID: 0 PID: 341 Comm: apparmor_parser Not tainted 6.18.0-rc6+ #9 NONE\n[\u00a0\u00a0 74.536543] Call Trace:\n[\u00a0\u00a0 74.568561] [<0000000000434c24>] dump_stack+0x8/0x18\n[\u00a0\u00a0 74.633757] [<0000000000476438>] __warn+0xd8/0x100\n[\u00a0\u00a0 74.696664] [<00000000004296d4>] warn_slowpath_fmt+0x34/0x74\n[\u00a0\u00a0 74.771006] [<00000000008db28c>] aa_dfa_unpack+0x6cc/0x720\n[\u00a0\u00a0 74.843062] [<00000000008e643c>] unpack_pdb+0xbc/0x7e0\n[\u00a0\u00a0 74.910545] [<00000000008e7740>] unpack_profile+0xbe0/0x1300\n[\u00a0\u00a0 74.984888] [<00000000008e82e0>] aa_unpack+0xe0/0x6a0\n[\u00a0\u00a0 75.051226] [<00000000008e3ec4>] aa_replace_profiles+0x64/0x1160\n[\u00a0\u00a0 75.130144] [<00000000008d4d90>] policy_update+0xf0/0x280\n[\u00a0\u00a0 75.201057] [<00000000008d4fc8>] profile_replace+0xa8/0x100\n[\u00a0\u00a0 75.274258] [<0000000000766bd0>] vfs_write+0x90/0x420\n[\u00a0\u00a0 75.340594] [<00000000007670cc>] ksys_write+0x4c/0xe0\n[\u00a0\u00a0 75.406932] [<0000000000767174>] sys_write+0x14/0x40\n[\u00a0\u00a0 75.472126] [<0000000000406174>] linux_sparc_syscall+0x34/0x44\n[\u00a0\u00a0 75.548802] ---[ end trace 0000000000000000 ]---\n[\u00a0\u00a0 75.609503] dfa blob stream 0xfff0000008926b96 not aligned.\n[\u00a0\u00a0 75.682695] Kernel unaligned access at TPC[8db2a8] aa_dfa_unpack+0x6e8/0x720\n\nWork around it by using the get_unaligned_xx() helpers."}], "id": "CVE-2026-46254", "lastModified": "2026-06-09T20:10:54.383", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-06-03T18:16:26.323", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/23f112bd6144e815153462e12d313ac3e7027168"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/64802f731214a51dfe3c6c27636b3ddafd003eb0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/cded636008bde2b397a7cf63b8299d7c303aaf6a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ec737e7fdf2f0ba7b203d4ec72cc915978b10e7e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: AppArmor: Allow apparmor to handle unaligned dfa tables", "id": "2484445", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484445"}, "csaw": false, "cwe": "CWE-843", "details": ["A flaw was found in the Linux kernel's AppArmor security module. This vulnerability arises when AppArmor processes unaligned Deterministic Finite Automaton (DFA) tables, which can originate from either kernel or userspace. The unaligned memory access triggered by these tables can lead to system instability or a kernel warning, potentially resulting in a Denial of Service (DoS)."], "name": "CVE-2026-46254", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46254\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46254\nhttps://lore.kernel.org/linux-cve-announce/2026060335-CVE-2026-46254-2dd0@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e6e8bf418850d7958311a96ccfb594f2bcc8313e,ec737e7fdf2f0ba7b203d4ec72cc915978b10e7e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e6e8bf418850d7958311a96ccfb594f2bcc8313e,23f112bd6144e815153462e12d313ac3e7027168)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e6e8bf418850d7958311a96ccfb594f2bcc8313e,cded636008bde2b397a7cf63b8299d7c303aaf6a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e6e8bf418850d7958311a96ccfb594f2bcc8313e,64802f731214a51dfe3c6c27636b3ddafd003eb0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.14,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.4,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-03T19:45:41.339364+00:00", "updated": "2026-06-09T23:45:15.694135+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}