Linux-Security-Module Archive on
 help / color / Atom feed
From: John Johansen <>
To: Linus Torvalds <>
Cc: LKLM <>,
Subject: [GIT PULL] apparmor bug fixes for v5.7-rc6
Date: Thu, 21 May 2020 16:01:42 -0700
Message-ID: <> (raw)

Hi Linus,

Can you please pull the following bug fixes for apparmor


- John

The following changes since commit b85051e755b0e9d6dd8f17ef1da083851b83287d:

  Merge tag 'fixes-for-5.7-rc6' of git:// (2020-05-20 13:23:55 -0700)

are available in the Git repository at:

  git:// tags/apparmor-pr-2020-05-21

for you to fetch changes up to c54d481d71c6849e044690d3960aaebc730224cc:

  apparmor: Fix use-after-free in aa_audit_rule_init (2020-05-21 15:25:51 -0700)

+ Bug Fixes
  - Fix use-after-free in aa_audit_rule_init
  - Fix refcnt leak in policy_update
  - Fix potential label refcnt leak in aa_change_profile

Navid Emamdoost (1):
      apparmor: Fix use-after-free in aa_audit_rule_init

Xiyu Yang (2):
      apparmor: fix potential label refcnt leak in aa_change_profile
      apparmor: Fix aa_label refcnt leak in policy_update

 security/apparmor/apparmorfs.c | 3 ++-
 security/apparmor/audit.c      | 3 ++-
 security/apparmor/domain.c     | 3 +--
 3 files changed, 5 insertions(+), 4 deletions(-)

             reply index

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-05-21 23:01 John Johansen [this message]
2020-05-21 23:50 ` pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \ \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Linux-Security-Module Archive on

Archives are clonable:
	git clone --mirror linux-security-module/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 linux-security-module linux-security-module/ \
	public-inbox-index linux-security-module

Example config snippet for mirrors

Newsgroup available over NNTP:

AGPL code for this site: git clone