SUSE CVE-2026-72460

In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label with fnlabelbuildinscope before the nonewprivs subset check. The build helper can fail and return NULL or an ERRPTR, but the result was...

SUSE CVE-2026-72461

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the skctx Currently updateskctx transfers the plabel reference, unfortunately it is also unconditionally put in the caller. Ideally we would make the caller conditionally put the referenc...

PT-2026-82919

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the AppArmor module. The aa replace profiles function accesses the udata-size variable after the aa put loaddataudata function has been called, which...

CVE-2026-80619: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

SUSE CVE-2026-72459

In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources...

SUSE CVE-2026-72462

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peerpath is used The holding a reference to the peersk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with...

SUSE CVE-2026-61711

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098828 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-fre...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104571 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098961 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds in unpackpdb Start states are read from untrust...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098840 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verifydfa The verifydfa function only chec...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098952 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098975 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privileged policy management An unprivileged local...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098813 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098895 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg/sendto with MSGFASTOPEN i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098803 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its characte...

GO-2026-6255 BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit...

ROOT-OS-DEBIAN-12-CVE-2016-1585 CVE-2016-1585 in apparmor - Patched by Root

Root has patched CVE-2016-1585 in the apparmor package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed an issue where an uninitialized pointer was passed to auditloguntrustedstring. Commit 4a134723f9f1 “AppArmor: moved the check for aanull file to cover all cases”. It corrected a minor bug where pathname might...