Race condition in Linux kernel AppArmor i_private handling

CVE-2026-23411 is a Linux kernel AppArmor vulnerability caused by a race between releasing data referenced from an inode's i_private field and subsequent filesystem callbacks that may still access that data. AppArmor removed the original filesystem entry and then dropped its reference to the associated i_private data, but the inode could remain alive beyond that point. As a result, later fs callback functions could dereference data that had already been freed, creating a use-after-free style condition. The issue is most likely to affect rawdata and loaddata objects because they have the fewest references, though other AppArmor data types stored in i_private may also be reachable with carefully crafted triggering conditions. The fix moves the put/release of i_private-referenced data to inode eviction, where the lifetime is correctly synchronized with inode teardown.