1847 matches found
CVE-2022-50860 apparmor: Fix memleak in alloc_ns()
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
CVE-2022-50860
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 "apparmor: share profile name on replacement", the hname member of struct aapolicy is not valid slab object, but a subset of that, it can not be freed by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992535 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992589)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992589 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...
PT-2025-53978
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the Linux kernel’s AppArmor subsystem within the alloc ns function. The issue stemmed from changes introduced by commit a1bd627b46d1, which...
Linux Distros Unpatched Vulnerability : CVE-2022-50754
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size...
SUSE CVE-2022-50754
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
EUVD-2022-55807
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
CVE-2022-50754
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
CVE-2022-50754
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
UBUNTU-CVE-2022-50754
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
CVE-2022-50754 apparmor: fix a memleak in multi_transaction_new()
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
CVE-2022-50754
CVE-2022-50754 concerns a mem leak in the Linux kernel’s AppArmor path: in multi_transaction_new(), t is not freed or released when copy_from_user(t->data, buf, size) fails. The vulnerability details indicate the root cause is failure to free or pass out t on error, leading to a memory leak. T...
CVE-2022-50754 apparmor: fix a memleak in multi_transaction_new()
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multitransactionnew In multitransactionnew, the variable t is not freed or passed out on the failure of copyfromusert-data, buf, size, which could lead to a memleak. Fix this bug by adding a...
PT-2025-53120
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the multi transaction new function within the AppArmor subsystem. Specifically, the variable t is not freed or passed out if copy from user fails, leading to a...
CVE-2025-65105
A flaw was found in Apptainer. This vulnerability allows a container to disable the --security=apparmor: and --security=selinux: options, bypassing security restrictions on container operations via the --security option. This affects unprivileged users on systems where Apparmor or SELinux...
GO-2025-4176 Apptainer ineffectively applies selinux and apparmor --security options in github.com/apptainer/apptainer
Apptainer ineffectively applies selinux and apparmor --security options in github.com/apptainer/apptainer...
GO-2025-4177 Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity
Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
EUVD-2025-200292
Apptainer ineffectively applies selinux and apparmor --security options...
Use of Incorrectly-Resolved Name or Reference
Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference in the handling of procfs file writes that leads to improper enforcement of the two --security options: --security=apparmor: and --security=selinux:. An attacker can bypass intended security...