CVE-2022-50754

apparmor: fix a memleak in multi_transaction_new()

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix a memleak in multi_transaction_new()

In multi_transaction_new(), the variable t is not freed or passed out

on the failure of copy_from_user(t->data, buf, size), which could lead

to a memleak.

Fix this bug by adding a put_multi_transaction(t) in the error path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Published
2025-12-24T13:05Z
EPSS history
Timeline
  • 24 DEC 13:05Z
    apparmor: fix a memleak in multi_transaction_new()
    cvelistv5