CVE-2019-18814

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.9

Description The issue is related to a use-after-free error in the aa audit rule init() function, located in security/apparmor/audit.c, which can be exploited by a remote attacker to execute arbitrary code. The error occurs when aa label parse() fails in aa audit rule init().

Recommendations For Linux kernel versions prior to 5.3.9, update to version 5.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the aa audit rule init() function until a patch is available.