Microsoft’s security guidance for CVE-2026-23406 points to an AppArmor bug in the Linux kernel, described as a side-effect issue in the match_char() macro usage. In practical terms, that kind of bug matters because a security-critical parser or matcher can behave differently than the programmer...