"Crackarmor" apparmor vulnerabilities

PSA-2026-00010-1 2026-03-13 PBS PDM PMG

Betroffene Pakete

proxmox-kernel-*

Details

Qualys discovered several vulnerabilities in the AppArmor LSM (Linux Security Module) code of the Linux kernel, which are being referred to as "Crackarmor".

All of the vulnerabilities require unprivileged local user access. The impact of these vulnerabilities ranges from denial of service, kernel memory information leak, removing security controls, local privilege escalation to root user to potential container escapes.

Refer to the upstream advisories linked below for more details.

Behoben in

proxmox-kernel-6.8.12-20-pve(-signed) (Bookworm based releases)

proxmox-kernel-6.14.11-6-bpo12-pve(-signed) (Bookworm based releases)

proxmox-kernel-6.14.11-6-pve(-signed) (Trixie based releases)

proxmox-kernel-6.17.13-2-pve(-signed) (Trixie based releases)

Referenzen

https://cdn2.qualys.com/advisory/2026/03/10/crack-armor.txt (öffnet in neuem Tab) (Qualys advisory)

https://ubuntu.com/security/vulnerabilities/crackarmor (öffnet in neuem Tab) (Ubuntu Security Team advisory)

Diese Seite ist eine inoffizielle Kopie des offiziellen Beitrags im Proxmox-Forum (öffnet in neuem Tab). Prüfe vor jeder Maßnahme das Original. Der Text des Advisories wird so auf Englisch angezeigt, wie Proxmox ihn veröffentlicht hat.