‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems

Qualys disclosed nine serious AppArmor vulnerabilities (present since v4.11 / 2017) that enable a "confused deputy" attack allowing low-privileged actors to trick privileged components into performing dangerous actions, potentially leading to root access, container escapes, and DoS; the flaws may affect over 12.6 million enterprise systems including critical infrastructure, and vendors coordinated fixes though no CVEs had been published at the time of the report.