Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs test aa_change_profile() builds a replacement label with fn_label_build_in_scope() before the no_new_privs subset check. The build helper can fail and return NULL or an ERR_PTR, but the result was passed to aa_label_is_unconfined_subset() before the existing IS_ERR_OR_NULL() check. Reuse the existing target-label build failure handling immediately after the build. This preserves the current audit handling while preventing the subset helper from dereferencing an invalid label.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e00b02bb6ac2a1893227ce8014b649028d6425d2 to < a29f06db44b4c94597ded58f639eed3e21781ac3affectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < cfc224866530a6842b6c2d2d30ef6a9b0e64bb9caffectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < 31cb109db5e6322ed22304fd5c0dedbaa438d6d3affectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < b7c45c05a396a017c49ac7949de240a0dfc0ac4eaffectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < d84bb195d208adbf77f012ca2a96e11163f6def1affectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < d82160132345688a09cbaa648cfdd16bb32e8ea2affectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < ec926b2a351eeeb31e6c9aee02e0c32f94b5588faffectede00b02bb6ac2a1893227ce8014b649028d6425d2 to < a58cafd38b46fb1a2220e2fbbcfe291ea75fa147affected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a29f06db44b4c94597ded58f639eed3e21781ac3 ↗
- https://git.kernel.org/stable/c/cfc224866530a6842b6c2d2d30ef6a9b0e64bb9c ↗
- https://git.kernel.org/stable/c/31cb109db5e6322ed22304fd5c0dedbaa438d6d3 ↗
- https://git.kernel.org/stable/c/b7c45c05a396a017c49ac7949de240a0dfc0ac4e ↗
- https://git.kernel.org/stable/c/d84bb195d208adbf77f012ca2a96e11163f6def1 ↗
- https://git.kernel.org/stable/c/d82160132345688a09cbaa648cfdd16bb32e8ea2 ↗
- https://git.kernel.org/stable/c/ec926b2a351eeeb31e6c9aee02e0c32f94b5588f ↗
- https://git.kernel.org/stable/c/a58cafd38b46fb1a2220e2fbbcfe291ea75fa147 ↗