1843 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003201)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003201 advisory. The apparmorsetprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002762)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002762 advisory. The apparmorsetprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain...
SUSE-SU-2026:20050-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2025-13193: external inactive snapshots for shut-down VMs that are incorrectly created as world-readable allow unprivileged users to inspect guest OS contents bsc1253703. - CVE-2025-12748: parsing of user-provided XM...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000526)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000526 advisory. An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c. Tenable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000355)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000355 advisory. An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c. Tenable...
Linux Distros Unpatched Vulnerability : CVE-2022-50860
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile name on replacement, the hname member of struct aapolicy is not...
PT-2026-26129
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the AppArmor subsystem related to the handling of Deterministic Finite Automata DFA start states during policy unpacking. Specifically, the unpack...
PT-2026-26128
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged local user can potentially gain privileged policy management capabilities within the Linux kernel due to a confused deputy attack. This occurs when an unprivileged user...
SUSE CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993222)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993222 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992703)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992703 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993282)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993282 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile-parent-dentsAAFSPROFDIR could be NULL onl...
EUVD-2022-55838
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
UBUNTU-CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860 apparmor: Fix memleak in alloc_ns()
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860
The CVE-2022-50860 issue affects the Linux kernel's AppArmor subsystem. After the commit a1bd627b46d1, the hname member of struct aa_policy becomes an invalid slab object and cannot be freed by kfree_sensitive(); the fix is to use aa_policy_destroy() to properly free the resource, preventing a me...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992535 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by...