CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's AppArmor component, specifically during the allocation of the ACCEPT2 table for older policy data. If the allocation fails, the system incorrectly returns a policy database without the necessary table, potentially leading to security policy enforcement issues. Linux administrators and security teams should prioritize this issue to ensure the integrity of their security policies and prevent potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpack_pdb() may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning a policydb with the required table missing. Return -ENOMEM through the normal failure path when the ACCEPT2 allocation fails. Remove the now-unused out label.