"Crackarmor" apparmor vulnerabilities

Details

Qualys discovered several vulnerabilities in the AppArmor LSM (Linux Security Module) code of the Linux kernel, which are being referred to as "Crackarmor".

All of the vulnerabilities require unprivileged local user access. The impact of these vulnerabilities ranges from denial of service, kernel memory information leak, removing security controls, local privilege escalation to root user to potential container escapes.

Refer to the upstream advisories linked below for more details.

Fixed in

• proxmox-kernel-6.8.12-20-pve(-signed) (Bookworm based releases)

• proxmox-kernel-6.14.11-6-bpo12-pve(-signed) (Bookworm based releases)

• proxmox-kernel-6.14.11-6-pve(-signed) (Trixie based releases)

• proxmox-kernel-6.17.13-2-pve(-signed) (Trixie based releases)

References

• https://cdn2.qualys.com/advisory/2026/03/10/crack-armor.txt (opens in a new tab) (Qualys advisory)

• https://ubuntu.com/security/vulnerabilities/crackarmor (opens in a new tab) (Ubuntu Security Team advisory)