Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f1bd904175e8190ce14aedee37e207ab51fe3b30 to < b14fbacad77d64594228983ec20d61a224f3f491affectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < b5a9da5d36162d34db0f36abb15420e295176793affectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < 7cb69e109610bba500e1ecb870f7988a4717208aaffectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < cc2192899d502e3321e60cf1e91421e7309d089caffectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < bf310b044e85d4de670c94295c5d8e4c5bc5e7bcaffectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4affectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < 6d91479174240f39e9edea250d95fa08c678a207affectedf1bd904175e8190ce14aedee37e207ab51fe3b30 to < 654fe7505dc6889724d4094fa64f89991afabfc3affected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b14fbacad77d64594228983ec20d61a224f3f491 ↗
- https://git.kernel.org/stable/c/b5a9da5d36162d34db0f36abb15420e295176793 ↗
- https://git.kernel.org/stable/c/7cb69e109610bba500e1ecb870f7988a4717208a ↗
- https://git.kernel.org/stable/c/cc2192899d502e3321e60cf1e91421e7309d089c ↗
- https://git.kernel.org/stable/c/bf310b044e85d4de670c94295c5d8e4c5bc5e7bc ↗
- https://git.kernel.org/stable/c/ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4 ↗
- https://git.kernel.org/stable/c/6d91479174240f39e9edea250d95fa08c678a207 ↗
- https://git.kernel.org/stable/c/654fe7505dc6889724d4094fa64f89991afabfc3 ↗