CVE-2026-80619 apparmor: fix potential UAF in aa_replace_profiles

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

CVE-2026-80619

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098828 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-fre...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098840 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verifydfa The verifydfa function only chec...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098961 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds in unpackpdb Start states are read from untrust...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098975 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privileged policy management An unprivileged local...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098952 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098813 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098895 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg/sendto with MSGFASTOPEN i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098803 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in matchchar macro usage The matchchar macro evaluates its characte...

GO-2026-6255 BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit...

ROOT-OS-DEBIAN-12-CVE-2016-1585 CVE-2016-1585 in apparmor - Patched by Root

Root has patched CVE-2016-1585 in the apparmor package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8 contains SAUCE patches that may involve the use of an uninitialized variable in the AppArmor AFINET/AFINET6 socket mediation code. This bug can be triggered by a non-privileged local user, and it could lead to incorrect, fine-grained mediation of network sockets...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may include a vulnerability involving NULL pointer dereferencing in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel oops...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: A reference count leak has been fixed in aapivotroot. The aapivotroot function contains a bug related to reference counting in a specific path. When aareplacecurrentlabel returns successfully, the function forgets to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: Fixed a memory leak in aasimplewritetobuffer. When copyfromuser failed, memory was freed by kvfree. However, the management structure and data blob are allocated independently. Therefore, only kvfreedata causes the memo...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly attempt to free a pointer that was not previously allocated using kmalloc. At the same time, allocated memory is also leaked. This bug can be triggered by an unprivileged local user, and it can result in corruption of slab...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that include a memory leak issue in the handling of large responses to AppArmor notifications. This bug can be triggered by a non-privileged local user. The memory leak could lead to resource exhaustion...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8 contains SAUCE patches that include a potential NULL pointer dereferencing issue in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel panic...