The AppArmor bug tracked as CVE-2026-23407 is a serious kernel memory-safety issue that can turn a malformed policy into a system-level denial of service, and in some cases a broader integrity and confidentiality problem. The flaw sits in verify_dfa(), where the kernel fails to apply a bounds...