Re: [PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()

From: Sasha Levin

Date: Thu Oct 15 2026 - 15:38:48 EST


> AppArmor's begin_current_label_crit_section() is a scary function called
> from lots of LSM hooks (in particular VFS/socket-related ones) that checks
> if the label referenced by the current creds is marked FLAG_STALE, and if

Queued for 6.6, thanks.

--
Thanks,
Sasha