CVE-2022-50860

CVE-2022-50860 affects the Linux kernel AppArmor subsystem. After the commit a1bd627b46d1, the hname member of struct aa_policy becomes an invalid slab subset and cannot be freed with kfree_sensitive(); the issue is fixed by using aa_policy_destroy(). The vulnerability is a memleak in alloc_ns() ...