CVE-2022-50860

apparmor: Fix memleak in alloc_ns()

State: Published
Severity: 7.8 High
Published: Dec 30, 2025
Updated: Aug 5, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix memleak in alloc_ns()

After changes in commit a1bd627b46d1 ("apparmor: share profile name on replacement"), the hname member of struct aa_policy is not valid slab object, but a subset of that, it can not be freed by kfree_sensitive(), use aa_policy_destroy() to fix it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a1bd627b46d169268a0ee5960899fb5be960a317 to before 9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3Affected a1bd627b46d169268a0ee5960899fb5be960a317 to before 5f509fa740b17307f0cba412485072f632d5af36Affected a1bd627b46d169268a0ee5960899fb5be960a317 to before 0250cf8d37bb5201a117177afd24dc73a1c81657Affected a1bd627b46d169268a0ee5960899fb5be960a317 to before 12695b4b76d437b9c0182a6f7dfb2248013a9dafAffected a1bd627b46d169268a0ee5960899fb5be960a317 to before e9e6fa49dbab6d84c676666f3fe7d360497fd65bAffected
LinuxLinux	4.13Affected before 4.13Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

a1bd627b46d169268a0ee5960899fb5be960a317 to before 9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3Affected
a1bd627b46d169268a0ee5960899fb5be960a317 to before 5f509fa740b17307f0cba412485072f632d5af36Affected
a1bd627b46d169268a0ee5960899fb5be960a317 to before 0250cf8d37bb5201a117177afd24dc73a1c81657Affected
a1bd627b46d169268a0ee5960899fb5be960a317 to before 12695b4b76d437b9c0182a6f7dfb2248013a9dafAffected
a1bd627b46d169268a0ee5960899fb5be960a317 to before e9e6fa49dbab6d84c676666f3fe7d360497fd65bAffected

LinuxLinux

4.13Affected
before 4.13Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.