CVE Database›Document archive›CVE-2022-50077

CVE-2022-50077

kernel: apparmor: fix reference count leak in aa_pivotroot()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 18, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix reference count leak in aa_pivotroot()

The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak.

Fix it by decreasing the refcount of “target” in that path.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified