CVE-2022-50074

MEDIUM EPSS 5.1%
Published Jun 18, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aa_simple_write_to_buffer() When copy_from_user failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfree(data) cause a memleak issue here. Use aa_put_loaddata(data) to fix this issue.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥4.17  –  <4.19.256
linuxlinux_kernel*≥4.20  –  <5.4.211
linuxlinux_kernel*≥5.5  –  <5.10.138
linuxlinux_kernel*≥5.11  –  <5.15.63
linuxlinux_kernel*≥5.16  –  <5.19.4

References 6

  • git.kernel.org https://git.kernel.org/stable/c/417ea9fe972d2654a268ad66e89c8fcae67017c3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6500eb3a48ac221051b1791818a1ac74744ef617
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6583edbf459de2e06b9759f264c0ae27e452b97a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7db182a2ebeefded86fea542fcc5d6a68bb77f58
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8aab4295582eb397a125d2788b829fa62b88dbf7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bf7ebebce2c25071c719fd8a2f1307e0c243c2d7
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/417ea9fe972d2654a268ad66e89c8fcae67017c3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6500eb3a48ac221051b1791818a1ac74744ef617
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6583edbf459de2e06b9759f264c0ae27e452b97a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7db182a2ebeefded86fea542fcc5d6a68bb77f58
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8aab4295582eb397a125d2788b829fa62b88dbf7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bf7ebebce2c25071c719fd8a2f1307e0c243c2d7
    Patch