In the Linux kernel, the following vulnerability has been resolved:
apparmor: Fix memleak in aasimplewritetobuffer()
When copyfromuser failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfree(data) cause a memleak issue here. Use aaputloaddata(data) to fix this issue.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50074.json",
"cna_assigner": "Linux"
}[
{
"target": {
"file": "security/apparmor/apparmorfs.c"
},
"id": "CVE-2022-50074-304c000d",
"digest": {
"line_hashes": [
"60811421168307444260248195948437246488",
"338085673147948402061055380190214653341",
"319781167269409218367006351681961851356",
"316994777397286038271668807914583143675"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf7ebebce2c25071c719fd8a2f1307e0c243c2d7",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "security/apparmor/apparmorfs.c"
},
"id": "CVE-2022-50074-3c2cb23f",
"digest": {
"line_hashes": [
"60811421168307444260248195948437246488",
"338085673147948402061055380190214653341",
"319781167269409218367006351681961851356",
"316994777397286038271668807914583143675"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6500eb3a48ac221051b1791818a1ac74744ef617",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "security/apparmor/apparmorfs.c"
},
"id": "CVE-2022-50074-b547fac6",
"digest": {
"line_hashes": [
"60811421168307444260248195948437246488",
"338085673147948402061055380190214653341",
"319781167269409218367006351681961851356",
"316994777397286038271668807914583143675"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6583edbf459de2e06b9759f264c0ae27e452b97a",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"target": {
"file": "security/apparmor/apparmorfs.c"
},
"id": "CVE-2022-50074-d54e0b8d",
"digest": {
"line_hashes": [
"60811421168307444260248195948437246488",
"338085673147948402061055380190214653341",
"319781167269409218367006351681961851356",
"316994777397286038271668807914583143675"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7db182a2ebeefded86fea542fcc5d6a68bb77f58",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50074.json"