Checking against upstream linux 3 patches refer to "apparmor: make sure unix socket labeling is correctly updated" directly:
v7.2 6d25e7b47616 apparmor: fix refcount leak when updating the sk_ctx v7.2 4483efe4f215 apparmor: fix shadowing of plabel that prevents cache from being updated v7.0 e2938ad00b21 apparmor: fix NULL pointer dereference in __unix_needs_revalidation Between Ubuntu-7.0.0-34 and -38 we included a bunch of updates related to apparmor: 282bbbccc26f apparmor: Fix inverted comparison in cache_hold_inc() d270d0660782 apparmor: remove unnecessary goto and associated label cda0bd3fa830 apparmor: release exe file resources on path failure 6deb7ef07041 apparmor: fix label can not be immediately before a declaration 9ad8aa22d2f9 apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() e8a3c2e18b55 apparmor: don't audit files pointing to aa_null.dentry 73c3452e659d apparmor: put secmark label after secid lookup ad8d3f077672 apparmor: aa_getprocattr free procattr leak on format failure 44ee8d3d7f86 apparmor: fail policy unpack on accept2 allocation failure 3563e88126e9 apparmor: Fix return in ns_mkdir_op ad2ce29b0573 apparmor: remove or add symlinks to rawdata according to export_binary 1a26602daefe apparmor: fix NULL pointer dereference in unpack_pdb 7d2c8e90d6e4 UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb" b5eb452c7e1e apparmor: fix potential UAF in aa_replace_profiles 1e4a3812806a UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor5.0.0 [44/57]: apparmor-next 7.1: apparmor: fix potential UAF in aa_replace_profiles" eb4b02a411e7 apparmor: grab ns lock and refresh when looking up changehat child profiles f562459cabd0 UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor5.0.0 [38/57]: apparmor-next 7.1: apparmor: grab ns lock and refresh when looking up changehat child profiles" ceafb23bde09 apparmor: fix rawdata_f_data implicit flex array 380bb4e6be07 UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: apparmor5.0.0 [41/57]: apparmor-next 7.1: apparmor: fix rawdata_f_data implicit flex array" 30fcb8a01e5f apparmor: aa_label_alloc use aa_label_free on alloc failure fee9addce0ca apparmor: check label build before no_new_privs test 3180c15a4ea0 security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() 673b3f3e5cb9 apparmor: fix refcount leak when updating the sk_ctx 276375ac0550 apparmor: fix race in unix socket mediation when peer_path is used 8b436ac9e206 apparmor: fix shadowing of plabel that prevents cache from being updated I do not see yet why this caused update_sk_ctx() to break as the aa_label_is_subset() call did not change and the function itself also was not touched. But apparently it caused the crash now. There was an upstream apparmor patch submission mention (not yet in linux-next): https://lists.ubuntu.com/archives/apparmor/2026-September/014957.html -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2170572 Title: linux-image-7.0.0-38-generic randomly freezes Lenovo Legion 5 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2170572/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
