exploitDog

CVE-2022-50077

Опубликовано: 18 июн. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix reference count leak in aa_pivotroot()

The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak.

Fix it by decreasing the refcount of “target” in that path.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.14.1 (включая) до 4.14.291 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.256 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.211 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.138 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.63 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 5.19.4 (исключая)

cpe:2.3:o:linux:linux_kernel:4.14:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:4.14:rc8:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00017

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2022-50077

CVSS3: 5.5

ubuntu

8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak. Fix it by decreasing the refcount of “target” in that path.

CVE-2022-50077

CVSS3: 5.5

redhat

8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak. Fix it by decreasing the refcount of “target” in that path.

CVE-2022-50077

CVSS3: 5.5

debian

8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: a ...

GHSA-6q7v-49c4-hj5m

CVSS3: 5.5

github

8 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aa_pivotroot() The aa_pivotroot() function has a reference counting bug in a specific path. When aa_replace_current_label() returns on success, the function forgets to decrement the reference count of “target”, which is increased earlier by build_pivotroot(), causing a reference leak. Fix it by decreasing the refcount of “target” in that path.

SUSE-SU-2025:02537-1

suse-cvrf

6 месяцев назад

Security update for the Linux Kernel

EPSS

Процентиль: 3%

0.00017

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-Other