[PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()

Sasha Levin sashal at kernel.org
Thu Oct 15 19:35:51 UTC 2026


> AppArmor's begin_current_label_crit_section() is a scary function called
> from lots of LSM hooks (in particular VFS/socket-related ones) that checks
> if the label referenced by the current creds is marked FLAG_STALE, and if

Queued for 6.6, thanks.

-- 
Thanks,
Sasha



More information about the Linux-security-module-archive mailing list