Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aa_sock_file_perm Deal with the potential that sock and sock-sk can be NULL during socket setup or teardown. This could lead to an oops. The fix for NULL pointer dereference in __unix_needs_revalidation shows this is at least possible for af_unix sockets. While the fix for af_unix sockets applies for newer mediation this is still the fall back path for older af_unix mediation and other sockets, so ensure it is covered.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 68538ec34fcb4194c7961dc4eca6f5537fec8067affected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 5121b7283f1c46e4c06b88b1dda7b064429d77deaffected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < c11b7c3280d000376e27ebfed17ec7046699eab4affected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 0dc19bca22606f7a61d5988408f74e3ae0ef3486affected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 3852eb9a0392eb435c03dcb47d581bcfe6a9a95baffected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < ccb66a3c6c8f51b3ed1bc003b70bb9ff99e8d835affected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 8a0ededbfcff74598f82f1d4b8ef9db28878b317affected56974a6fcfef69ee0825bd66ed13e92070ac5224 to < 00b67657535dfea56e84d11492f5c0f61d0af297affected
Linux Linux
Default version status: affected
4.17affected0 to < 4.17unaffected5.10.252 to ≤ 5.10.*unaffected5.15.202 to ≤ 5.15.*unaffected6.1.165 to ≤ 6.1.*unaffected6.6.128 to ≤ 6.6.*unaffected6.12.75 to ≤ 6.12.*unaffected6.18.14 to ≤ 6.18.*unaffected6.19.4 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/68538ec34fcb4194c7961dc4eca6f5537fec8067 ↗
- https://git.kernel.org/stable/c/5121b7283f1c46e4c06b88b1dda7b064429d77de ↗
- https://git.kernel.org/stable/c/c11b7c3280d000376e27ebfed17ec7046699eab4 ↗
- https://git.kernel.org/stable/c/0dc19bca22606f7a61d5988408f74e3ae0ef3486 ↗
- https://git.kernel.org/stable/c/3852eb9a0392eb435c03dcb47d581bcfe6a9a95b ↗
- https://git.kernel.org/stable/c/ccb66a3c6c8f51b3ed1bc003b70bb9ff99e8d835 ↗
- https://git.kernel.org/stable/c/8a0ededbfcff74598f82f1d4b8ef9db28878b317 ↗
- https://git.kernel.org/stable/c/00b67657535dfea56e84d11492f5c0f61d0af297 ↗