]> git.ipfire.org Git - thirdparty/linux.git/commit
apparmor: fix NULL sock in aa_sock_file_perm
authorJohn Johansen <john.johansen@canonical.com>
Mon, 24 Nov 2025 23:07:42 +0000 (15:07 -0800)
committerJohn Johansen <john.johansen@canonical.com>
Thu, 22 Jan 2026 12:51:55 +0000 (04:51 -0800)
commit00b67657535dfea56e84d11492f5c0f61d0af297
treecef472ca06b842254e227bb44e7fc47d97b89d3b
parente2938ad00b21340c0362562dfedd7cfec0554d67
apparmor: fix NULL sock in aa_sock_file_perm

Deal with the potential that sock and sock-sk can be NULL during
socket setup or teardown. This could lead to an oops. The fix for NULL
pointer dereference in __unix_needs_revalidation shows this is at
least possible for af_unix sockets. While the fix for af_unix sockets
applies for newer mediation this is still the fall back path for older
af_unix mediation and other sockets, so ensure it is covered.

Fixes: 56974a6fcfef6 ("apparmor: add base infastructure for socket mediation")
Reviewed-by: Georgia Garcia <georgia.garcia@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
security/apparmor/net.c