Re: [PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()
From: Sasha Levin
Date: Thu Oct 15 2026 - 15:38:48 EST
> AppArmor's begin_current_label_crit_section() is a scary function called
> from lots of LSM hooks (in particular VFS/socket-related ones) that checks
> if the label referenced by the current creds is marked FLAG_STALE, and if
Queued for 6.6, thanks.
--
Thanks,
Sasha