In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix memory leak in verify_header
The function sets `*ns = NULL` on every call, leaking the namespace string allocated in previous iterations when multiple profiles are unpacked. This also breaks namespace consistency checking since *ns is always NULL when the comparison is made.
Remove the incorrect assignment. The caller (aa_unpack) initializes *ns to NULL once before the loop, which is sufficient.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 2, 2026 | Apr 2, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1139-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-azure-5.15Upgrade linux-image-oemUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-4.15.0-249-genericUpgrade linux-image-oracle-4.15Upgrade linux-image-bluefieldUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-2129-aws-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-4.15.0-1200-azureUpgrade linux-image-4.15.0-2092-gcp-fipsUpgrade linux-image-raspi2Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-1191-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-5.4.0-1161-azureUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1184-gcpUpgrade linux-image-4.15.0-1146-fipsUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1173-kvmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-raspi-5.4Upgrade linux-image-azure-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-249-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-bluefield-5.4Upgrade linux-image-azure-4.15Upgrade linux-image-genericUpgrade linux-image-oem-24.04dUpgrade linux-image-oem-6.17 | Apr 3, 2026 | Apr 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub