7.8

CVE-2026-72461

apparmor: fix refcount leak when updating the sk_ctx

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix refcount leak when updating the sk_ctx

Currently update_sk_ctx() transfers the plabel reference, unfortunately
it is also unconditionally put in the caller. Ideally we would make
the caller conditionally put the reference based on whether it was
transferred but for now just fix the bug by getting a reference.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 88fec3526e84123997ecebd6bb6778eb4ce779b7
Version < 045dbe89ac31709abd73390d0805d52fece7ef39
Status affected
Version 88fec3526e84123997ecebd6bb6778eb4ce779b7
Version < b8642f1478982a97ca2eb59f70f631a9de42ae11
Status affected
Version 88fec3526e84123997ecebd6bb6778eb4ce779b7
Version < 6d25e7b47616cb2db43351210929c8f19dc305a3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.17
Status affected
Version 0
Version < 6.17
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.035
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/045dbe89ac31709abd73390d0805d52fece7ef39
https://git.kernel.org/stable/c/b8642f1478982a97ca2eb59f70f631a9de42ae11
https://git.kernel.org/stable/c/6d25e7b47616cb2db43351210929c8f19dc305a3