CVE-2022-50860
Published Dec 30, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc_ns() After changes in commit a1bd627b46d1 ("apparmor: share profile name on replacement"), the hname member of struct aa_policy is not valid slab object, but a subset of that, it can not be freed by kfree_sensitive(), use aa_policy_destroy() to fix it.
Is your site exposed to CVE-2022-50860?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/0250cf8d37bb5201a117177afd24dc73a1c81657
https://git.kernel.org/stable/c/12695b4b76d437b9c0182a6f7dfb2248013a9daf
https://git.kernel.org/stable/c/5f509fa740b17307f0cba412485072f632d5af36
https://git.kernel.org/stable/c/9a32aa87a25d800b2c6f47bc2749a7bfd9a486f3
https://git.kernel.org/stable/c/e9e6fa49dbab6d84c676666f3fe7d360497fd65b
Frequently Asked Questions
What is CVE-2022-50860? +
In the Linux kernel, the following vulnerability has been resolved:
apparmor: Fix memleak in alloc_ns()
After changes in commit a1bd627b46d1 ("apparmor: share profile name on
replacement"), the hname member of struct aa_policy is not valid slab
object, but a subset of that, it can not be freed by kfree_sensitive(),
use aa_policy_destroy() to fix it.
How do I check if I'm vulnerable to CVE-2022-50860? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.