Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50074

apparmor: Fix memleak in aa_simple_write_to_buffer()

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aa_simple_write_to_buffer() When copy_from_user failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfree(data) cause a memleak issue here. Use aa_put_loaddata(data) to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < 6500eb3a48ac221051b1791818a1ac74744ef617affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < 7db182a2ebeefded86fea542fcc5d6a68bb77f58affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < 8aab4295582eb397a125d2788b829fa62b88dbf7affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < bf7ebebce2c25071c719fd8a2f1307e0c243c2d7affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < 6583edbf459de2e06b9759f264c0ae27e452b97aaffected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to < 417ea9fe972d2654a268ad66e89c8fcae67017c3affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.138 to ≤ 5.10.*unaffected
  • 5.15.63 to ≤ 5.15.*unaffected
  • 5.19.4 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References