CVE-2022-50754
kernel: apparmor: fix a memleak in multi_transaction_new()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 24, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix a memleak in multi_transaction_new()
In multi_transaction_new(), the variable t is not freed or passed out on the failure of copy_from_user(t->data, buf, size), which could lead to a memleak.
Fix this bug by adding a put_multi_transaction(t) in the error path.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified