CyberRota Analysis
AI-GeneratedA race condition vulnerability exists in the Linux kernel's AppArmor implementation when mediating Unix socket access using peer paths. This flaw can lead to unauthorized access to socket paths, potentially compromising system security. Linux administrators and security teams should prioritize this fix to mitigate risks associated with socket communication in their environments.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race in unix socket mediation when peer_path is used The holding a reference to the peer_sk is not enough to ensure access to the peer sk path. Accessing the path outside of the state lock allows for a race with unix_release_sock(). Fix this by taking the state lock and getting a reference to the path under lock. Ideally for connected sockets we would cache this information so we don't have to take the lock here. But for now just fix the race.