Multiple Vulnerabilities in AppArmor AKA CrackArmor

On 12 March, Qualys Threat Research disclosed multiple vulnerabilities in the Linux Mandatory Access Control (MAC) framework AppArmor, both in the Linux kernel as well as the AppArmor implementation on popular Linux distributions including Ubuntu, Debian and SUSE. A successful attack involving these vulnerabilities could allow a threat actor with access to the local filesystem to escalate their privileges to Root, bypass MAC policies, or execute a Denial of Service against the vulnerable system.