Riskcovery

CVE-2022-50074

apparmor: Fix memleak in aa_simple_write_to_buffer()

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix memleak in aa_simple_write_to_buffer()

When copy_from_user failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfree(data) cause a memleak issue here. Use aa_put_loaddata(data) to fix this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before 6500eb3a48ac221051b1791818a1ac74744ef617Affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before 7db182a2ebeefded86fea542fcc5d6a68bb77f58Affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before 8aab4295582eb397a125d2788b829fa62b88dbf7Affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before bf7ebebce2c25071c719fd8a2f1307e0c243c2d7Affected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before 6583edbf459de2e06b9759f264c0ae27e452b97aAffected
  • a6a52579e52b55448326db88bd9a5740e7c1a037 to before 417ea9fe972d2654a268ad66e89c8fcae67017c3Affected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 4.19.256 through 4.19.*Not affected
  • 5.4.211 through 5.4.*Not affected
  • 5.10.138 through 5.10.*Not affected
  • 5.15.63 through 5.15.*Not affected
  • 5.19.4 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.