Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72461

apparmor: fix refcount leak when updating the sk_ctx

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the sk_ctx Currently update_sk_ctx() transfers the plabel reference, unfortunately it is also unconditionally put in the caller. Ideally we would make the caller conditionally put the reference based on whether it was transferred but for now just fix the bug by getting a reference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 88fec3526e84123997ecebd6bb6778eb4ce779b7 to < 045dbe89ac31709abd73390d0805d52fece7ef39affected
  • 88fec3526e84123997ecebd6bb6778eb4ce779b7 to < b8642f1478982a97ca2eb59f70f631a9de42ae11affected
  • 88fec3526e84123997ecebd6bb6778eb4ce779b7 to < 6d25e7b47616cb2db43351210929c8f19dc305a3affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References