The Linux kernel AppArmor module's get_current_exe_path() function previously took references to exe_file and path before resolving the path name. If the aa_path_name() call failed, the function returned immediately without releasing these references, resulting in resource leaks. The vulnerability was addressed by routing failure cases through a common cleanup path that guarantees execution of fput() and path_put() to release the held references.

This vulnerability causes resource leaks in the kernel due to unreleased exe_file and path references when path resolution fails. While resource leaks can degrade system stability or lead to denial of service over time, there is no indication of direct code execution or privilege escalation from this issue. No known exploits are reported in the wild.

A fix for this vulnerability has been implemented in the Linux kernel by ensuring proper cleanup of resources on failure paths in get_current_exe_path(). Users should apply the official kernel updates containing this fix when available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the current remediation status.