apparmor: policy_int make sure list heads are initialized before fail path
In the Linux kernel, the following vulnerability has been resolved: apparmor: policy_int make sure list heads are initialized before fail path If profile create fails before policy_init is complete the list heads are not properly initialized causing profile_free() sanity checks to trigger the following splat. AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): WARNING: security/apparmor/lib.c:509 at aa_policy_destroy+0x164/0x1b0 security/apparmor/lib.c:509, CPU#0: syz.0.17/5541 Modules linked in: CPU: 0 UID: 0 PID: 5541 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:aa_policy_destroy+0x16b/0x1b0 security/apparmor/lib.c:509 Code: 85 ed 7e 4d e8 96 bc 37 fd 5b 41 5c 41 5e 41 5f 5d e9 19 27 4e 07 cc e8 83 bc 37 fd 48 8d 3d 0c f0 d3 0b 48 c7 c6 a4 eb 38 8e <67> 48 0f b9 3a e9 04 ff ff ff e8 66 bc 37 fd 48 8d 3d ff ef d3 0b RSP: 0018:ffffc9000345eaa0 EFLAGS: 00010293 RAX: ffffffff848f530d RBX: ffff88803f734800 RCX: ffff88801af2a580 RDX: 0000000000000000 RSI: ffffffff8e38eba4 RDI: ffffffff90634320 RBP: 0000000000000000 R08: 0000000000000cc0 R09: 00000000ffffffff R10: dffffc0000000000 R11: fffffbfff1d95913 R12: dead000000000122 R13: ffff88803f734800 R14: ffff88803f734828 R15: dffffc0000000000 FS: 00007f5f6a1836c0(0000) GS:ffff88808c519000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000
CVE-2026-93245
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-93245
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "88ba930e7d0586ca2700757249f1e6fc0bbab0fc",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "ee017ef9aa2cf20d85d4a20c09ef3db9fb240310",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "62f159fac76468dbbfd977f4f18472d4a01e8d74",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "0664c75afe87a1d7d4f4e1d7eecf50ad829fb6e8",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "4a09a5e6512a3792c78ae8e3ca79cb55a11eed57",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "5449f715f24e86648f8cc8fba8d97ff6b5d04981",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "dd52ab1c5436be86f5b8ca118fa8e5d61d63ffed",
"versionType": "git"
},
{
"status": "affected",
"version": "fe6bb31f590c9cd9c8d3ddbdfd4301f72db91718",
"lessThan": "3daad923a8685adb66087e0d819559b7eb6ba975",
"versionType": "git"
}
],
"programFiles": [
"security/apparmor/lib.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.11"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.11",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.270",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.221",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"security/apparmor/lib.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-93245
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #37940 · Revision 1
- Added to Heist Feed
- Publisher date