Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72456

apparmor: release exe file resources on path failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get_current_exe_path() takes both an exe_file reference and a path reference before resolving the path name. If aa_path_name() failed, it returned immediately and leaked both references. Route the failure through the common cleanup path so fput() and path_put() always run after the references are acquired.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8d34e16f7f2b51f880957f2caadaae731ee28867 to < 393809a05cfb60309ad63ee09138db8296d6b97eaffected
  • 8d34e16f7f2b51f880957f2caadaae731ee28867 to < 7306c41672487a6c28430714be063bc6942c28f2affected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References