Beveiligingsadvies

CVE-2022-50860

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-30 12:15:33
Laatst bijgewerkt 2026-08-05 08:59:49
Toegewezen door Linux
CVSS-score 7.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc_ns() After changes in commit a1bd627b46d1 ("apparmor: share profile name on replacement"), the hname member of struct aa_policy is not valid slab object, but a subset of that, it can not be freed by kfree_sensitive(), use aa_policy_destroy() to fix it.