Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made. Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dd51c84857630e77c139afe4d9bba65fc051dc3f to < 9d678eb0fe55c9195d9a253e8c5b82a87b930737affecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < 6b79abcb3c985e153fcf9d395e1d4336081aabc2affecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557affecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < 663ce34786e759ebcbeb3060685c20bcc886d51aaffecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < 786e2c2a87d9c505f33321d1fd23a176aa8ddeb1affecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < 4f0889f2df1ab99224a5e1ac4e20437eea5fe38eaffecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < 42fd831abfc15d0643c14688f0522556b347e7e6affecteddd51c84857630e77c139afe4d9bba65fc051dc3f to < e38c55d9f834e5b848bfed0f5c586aaf45acb825affected
Linux Linux
Default version status: affected
3.12affected0 to < 3.12unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.169 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.77 to ≤ 6.12.*unaffected6.18.18 to ≤ 6.18.*unaffected6.19.8 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9d678eb0fe55c9195d9a253e8c5b82a87b930737 ↗
- https://git.kernel.org/stable/c/6b79abcb3c985e153fcf9d395e1d4336081aabc2 ↗
- https://git.kernel.org/stable/c/bcf82c0c5a8b383fd2d5d8f3fd880cdcab2ac557 ↗
- https://git.kernel.org/stable/c/663ce34786e759ebcbeb3060685c20bcc886d51a ↗
- https://git.kernel.org/stable/c/786e2c2a87d9c505f33321d1fd23a176aa8ddeb1 ↗
- https://git.kernel.org/stable/c/4f0889f2df1ab99224a5e1ac4e20437eea5fe38e ↗
- https://git.kernel.org/stable/c/42fd831abfc15d0643c14688f0522556b347e7e6 ↗
- https://git.kernel.org/stable/c/e38c55d9f834e5b848bfed0f5c586aaf45acb825 ↗