In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix reference count leak in aa_pivotroot()
The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak.
Fix it by decreasing the refcount of “target” in that path.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 4.14.1 | 4.14.291 |
| linux / linux_kernel | 4.15 | 4.19.256 |
| linux / linux_kernel | 4.20 | 5.4.211 |
| linux / linux_kernel | 5.5 | 5.10.138 |
| linux / linux_kernel | 5.11 | 5.15.63 |
| linux / linux_kernel | 5.16 | 5.19.4 |
| linux / linux_kernel | 4.14 | 4.14.x |
| linux / linux_kernel | 4.14-rc2 | 4.14-rc2.x |
| linux / linux_kernel | 4.14-rc3 | 4.14-rc3.x |
| linux / linux_kernel | 4.14-rc4 | 4.14-rc4.x |
| linux / linux_kernel | 4.14-rc5 | 4.14-rc5.x |
| linux / linux_kernel | 4.14-rc6 | 4.14-rc6.x |
| linux / linux_kernel | 4.14-rc7 | 4.14-rc7.x |
| linux / linux_kernel | 4.14-rc8 | 4.14-rc8.x |