CVE-2026-72459
apparmor: aa_label_alloc use aa_label_free on alloc failure
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.13
References 8
git.kernel.org
- stable/c/b14fbacad77d64594228983ec20d61a224f3f491
- stable/c/b5a9da5d36162d34db0f36abb15420e295176793
- stable/c/7cb69e109610bba500e1ecb870f7988a4717208a
- stable/c/cc2192899d502e3321e60cf1e91421e7309d089c
- stable/c/bf310b044e85d4de670c94295c5d8e4c5bc5e7bc
- stable/c/ae02e603c0b39b29f3ce6fe3efe01b286af1a2a4
- stable/c/6d91479174240f39e9edea250d95fa08c678a207
- stable/c/654fe7505dc6889724d4094fa64f89991afabfc3