CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's AppArmor component, specifically in the aa_label_alloc function, which improperly handles memory allocation failures. If the allocation of a label proxy fails, it leads to a resource leak, as initialized resources are not properly released, potentially compromising system integrity. Linux system administrators and developers utilizing AppArmor should prioritize addressing this issue to prevent resource leaks and ensure robust security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on alloc failure aa_label_alloc() allocates a secid before allocating or taking the label proxy. If the later proxy step fails, the error path only freed the label memory, leaking any resources initialized by aa_label_init(). Use aa_label_free() on the failure path so partially initialized labels release their secid and other label resources before the backing memory is freed.