AZL-100791 CVE-2026-89762 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

CVE-2026-89762

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

DEBIAN-CVE-2026-80928

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-89762

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

CVE-2026-89762 apparmor: fix cred UAF caused by begin_current_label_crit_section()

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

CVE-2026-89762

CVE-2026-89762 is a Use-After-Free (UAF) vulnerability in the Linux kernel's AppArmor security module. The root cause lies in begin_current_label_crit_section(), which calls aa_replace_current_label() from LSM hooks to swap stale credentials. When the replacement occurs while a task has overridde...

CVE-2026-80928 smack: fix cred UAF in smack_file_send_sigiotask()

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

PT-2026-90058

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack file send sigiotask When inspecting the credentials of another task, objective credentials -real cred, accessed with task cred must always be used. Accessing -cred on a non-current task is forbidden...

PT-2026-90478

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin current label crit section AppArmor's begin current label crit section is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label...

Linux 5.6 Cred Refcount Overflow

Linux 5.6 suffers from a cred refcount overflow at approximately 39 gigs of memory usage via iouring. see also my related prior bug reports about overflowing refcounts with lots of RAM usage: https://crbug.com/project-zero/809: BPF program refcount, with 32GiB RAM...