In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix memleak in alloc_ns()

After changes in commit a1bd627b46d1 ("apparmor: share profile name on
replacement"), the hname member of struct aa_policy is not valid slab
object, but a subset of that, it can not be freed by kfree_sensitive(),
use aa_policy_destroy() to fix it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a1bd627b46d169268a0ee5960899fb5be960a317 affected < 9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3
a1bd627b46d169268a0ee5960899fb5be960a317 affected < 5f509fa740b17307f0cba412485072f632d5af36
a1bd627b46d169268a0ee5960899fb5be960a317 affected < 0250cf8d37bb5201a117177afd24dc73a1c81657
a1bd627b46d169268a0ee5960899fb5be960a317 affected < 12695b4b76d437b9c0182a6f7dfb2248013a9daf
a1bd627b46d169268a0ee5960899fb5be960a317 affected < e9e6fa49dbab6d84c676666f3fe7d360497fd65b
Linux Linux affected
Version Status Constraints
4.13 affected —
0 unaffected < 4.13
5.10.163 unaffected ≤ 5.10.*
5.15.86 unaffected ≤ 5.15.*
6.0.16 unaffected ≤ 6.0.*
6.1.2 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0250cf8d37bb5201a117177afd24dc73a1c81657 cve-icon cve-icon
https://git.kernel.org/stable/c/12695b4b76d437b9c0182a6f7dfb2248013a9daf cve-icon cve-icon
https://git.kernel.org/stable/c/5f509fa740b17307f0cba412485072f632d5af36 cve-icon cve-icon
https://git.kernel.org/stable/c/9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3 cve-icon cve-icon
https://git.kernel.org/stable/c/e9e6fa49dbab6d84c676666f3fe7d360497fd65b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123047-CVE-2022-50860-9d3a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50860 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50860 cve-icon
History

Wed, 31 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc_ns() After changes in commit a1bd627b46d1 ("apparmor: share profile name on replacement"), the hname member of struct aa_policy is not valid slab object, but a subset of that, it can not be freed by kfree_sensitive(), use aa_policy_destroy() to fix it.
Title apparmor: Fix memleak in alloc_ns()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:15:33.859Z

Reserved: 2025-12-30T12:06:07.135Z

Link: CVE-2022-50860

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:00.787

Modified: 2025-12-31T20:43:05.160

Link: CVE-2022-50860

cve-icon Redhat

Severity :

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2022-50860 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.