7.8

CVE-2026-72459

apparmor: aa_label_alloc use aa_label_free on alloc failure

In the Linux kernel, the following vulnerability has been resolved:

apparmor: aa_label_alloc use aa_label_free on alloc failure

aa_label_alloc() allocates a secid before allocating or taking the label
proxy. If the later proxy step fails, the error path only freed the label
memory, leaking any resources initialized by aa_label_init().

Use aa_label_free() on the failure path so partially initialized labels
release their secid and other label resources before the backing memory is
freed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < b14fbacad77d64594228983ec20d61a224f3f491
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < b5a9da5d36162d34db0f36abb15420e295176793
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < 7cb69e109610bba500e1ecb870f7988a4717208a
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < cc2192899d502e3321e60cf1e91421e7309d089c
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < bf310b044e85d4de670c94295c5d8e4c5bc5e7bc
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < 6d91479174240f39e9edea250d95fa08c678a207
Status affected
Version f1bd904175e8190ce14aedee37e207ab51fe3b30
Version < 654fe7505dc6889724d4094fa64f89991afabfc3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.13
Status affected
Version 0
Version < 4.13
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.037
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b14fbacad77d64594228983ec20d61a224f3f491
https://git.kernel.org/stable/c/b5a9da5d36162d34db0f36abb15420e295176793
https://git.kernel.org/stable/c/7cb69e109610bba500e1ecb870f7988a4717208a
https://git.kernel.org/stable/c/cc2192899d502e3321e60cf1e91421e7309d089c
https://git.kernel.org/stable/c/bf310b044e85d4de670c94295c5d8e4c5bc5e7bc
https://git.kernel.org/stable/c/ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4
https://git.kernel.org/stable/c/6d91479174240f39e9edea250d95fa08c678a207
https://git.kernel.org/stable/c/654fe7505dc6889724d4094fa64f89991afabfc3