NetSight
IP …
medium5.5

CVE-2022-50077

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a refe…

Impact

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak. Fix it by decreasing the refcount of “target” in that path.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14.1 before 4.14.291
from 4.15 before 4.19.256
from 4.20 before 5.4.211
from 5.5 before 5.10.138
from 5.11 before 5.15.63
from 5.16 before 5.19.4

References