CVE-2026-45884

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> apparmor: avoid per-cpu hold underflow in aa_get_buffer<br /> <br /> When aa_get_buffer() pulls from the per-cpu list it unconditionally<br /> decrements cache-&gt;hold. If hold reaches 0 while count is still non-zero,<br /> the unsigned decrement wraps to UINT_MAX. This keeps hold non-zero for a<br /> very long time, so aa_put_buffer() never returns buffers to the global<br /> list, which can starve other CPUs and force repeated kmalloc(aa_g_path_max)<br /> allocations.<br /> <br /> Guard the decrement so hold never underflows.