Threats tagged 'ghsa-wgph-2236-wgxv'

CVE-2026-90179 is a vulnerability in the Linux kernel's AppArmor security module that causes a deadlock when changing hats in complain mode. The deadlock occurs because the change_hat function takes a lock to search the hat list, and creating a new learning profile also requires taking the same lock, leading to a self-blocking condition. This results in the affected process hanging and becoming unkillable. The issue was observed in Linux kernel versions 6.18.44 and 7.2-rc7 but not in 6.12.95 with Debian patches. Additional reference count leaks and a potential use-after-free were also fixed in the same patch. The fix involves restructuring locking in the affected functions to prevent deadlocks.