Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-80619

apparmor: fix potential UAF in aa_replace_profiles

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles The function aa_replace_profiles was accessing udata->size after calling aa_put_loaddata(udata), causing a potential UAF. Fixed this by saving the size to a local variable before dropping the reference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < 9d8e47cbce7536f19c96e37d0685a042010187eeaffected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < 9d37dc6376e336dc4b4f39a7ad0d069aa70e9495affected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < c0f3a3fda617beeec58708720304dd026a1a4dd7affected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < 5cba148eae6e8550c2889f5c0f94d72bed864321affected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < c44de0880b7ccc15c70a6352b5e107677d32b061affected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < 57b1bd4486d56254bb8af1a8f3d4445bbe505290affected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < dd5f1202f45a2dbe2c7dd10093f5c6bb2d8ac5bbaffected
  • 5ac8c355ae0013d82b3a07b49aebeadfce9b6e52 to < 7b42f95813dc9ceb6bda35afcf914630909a19f9affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References