[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section()

[John Johansen]

On 8/5/26 08:10, Jann Horn wrote:
> On Tue, Jul 14, 2026 at 5:39 PM Jann Horn <jannh at google.com> wrote:
>> AppArmor's begin_current_label_crit_section() is a scary function called
>> from lots of LSM hooks (in particular VFS/socket-related ones) that checks
>> if the label referenced by the current creds is marked FLAG_STALE, and if
>> so, attempts to use aa_replace_current_label() to replace the creds with an
>> updated version that uses a new label.
> 
> ping, I've seen no activity on this fix since posting it

sorry, just swamped and not catching up so far.

I am looking at it now