-

CVE-2022-50860

apparmor: Fix memleak in alloc_ns()

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix memleak in alloc_ns()

After changes in commit a1bd627b46d1 ("apparmor: share profile name on
replacement"), the hname member of struct aa_policy is not valid slab
object, but a subset of that, it can not be freed by kfree_sensitive(),
use aa_policy_destroy() to fix it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a1bd627b46d169268a0ee5960899fb5be960a317
Version < 9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3
Status affected
Version a1bd627b46d169268a0ee5960899fb5be960a317
Version < 5f509fa740b17307f0cba412485072f632d5af36
Status affected
Version a1bd627b46d169268a0ee5960899fb5be960a317
Version < 0250cf8d37bb5201a117177afd24dc73a1c81657
Status affected
Version a1bd627b46d169268a0ee5960899fb5be960a317
Version < 12695b4b76d437b9c0182a6f7dfb2248013a9daf
Status affected
Version a1bd627b46d169268a0ee5960899fb5be960a317
Version < e9e6fa49dbab6d84c676666f3fe7d360497fd65b
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.13
Status affected
Version 0
Version < 4.13
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.