Vulnerability in Linux

CVE-2022-50754

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the variable t is not freed or passed out on the failure of copy_from_user(t->data, buf, size), which could lead to a memleak. Fix this bug by adding a put_multi_transaction(t) in the error path.

EPSS: 0.002 (13.3th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 1dea3b41e84c5923173fe654dcb758a5cb4a46e5, 4.13, 0

References