Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50077

apparmor: fix reference count leak in aa_pivotroot()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak. Fix it by decreasing the refcount of “target” in that path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < d53194707d2a1851be027cd74266b96ceff799d3affected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < f4d5c7796571624e3f380b447ada52834270a287affected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < ef6fb6f0d0d8440595b45a7e53c6162c737177f4affected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < 2ceeb3296e9dde1d5772348046affcefdea605e2affected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < 64103ea357734b82384c925cba4758fdb909be0caffected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < 3ca40ad7afae144169a43988ef1a3f16182faf0aaffected
  • 2ea3ffb7782a84da33a8382f13ebd016da50079b to < 11c3627ec6b56c1525013f336f41b79a983b4d46affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 4.14.291 to ≤ 4.14.*unaffected
  • 4.19.256 to ≤ 4.19.*unaffected
  • 5.4.211 to ≤ 5.4.*unaffected
  • 5.10.138 to ≤ 5.10.*unaffected
  • 5.15.63 to ≤ 5.15.*unaffected
  • 5.19.4 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References