CVE-2022-50754

Linux Kernel - Memory Leak in AppArmor Multi-Transaction Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix a memleak in multi_transaction_new() In multi_transaction_new(), the variable t is not freed or passed out on the failure of copy_from_user(t->data, buf, size), which could lead to a memleak. Fix this bug by adding a put_multi_transaction(t) in the error path.

References (8)

Core 8

Scores

EPSS 0.0022
EPSS Percentile 13.2%

Details

Status published
Products (25)
linux/Kernel 4.13.0 - 4.14.303linux
linux/Kernel 4.15.0 - 4.19.270linux
linux/Kernel 4.20.0 - 5.4.229linux
linux/Kernel 5.11.0 - 5.15.86linux
linux/Kernel 5.16.0 - 6.0.16linux
linux/Kernel 5.5.0 - 5.10.163linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 4.13
Linux/Linux 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 - 11d5fe7da67c3334cefc981297fd5defb78df15c
Linux/Linux 1dea3b41e84c5923173fe654dcb758a5cb4a46e5 - 3d27a436e294ac5d7a51bd5348ca63a42a468b35
... and 15 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026