An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse() fails in aaauditrule_init() in security/apparmor/audit.c.
{ "urgency": "not yet assigned" }