Nine critical vulnerabilities in Linux AppArmor put over 12M enterprise systems at risk

CrackArmor Vulnerabilities In Linux AppArmor Could Expose Millions Of Systems

Security researchers from Qualys have disclosed nine vulnerabilities in the Linux kernel’s AppArmor module, collectively tracked as CrackArmor. The flaws have reportedly existed since 2017 and could allow unprivileged users to bypass protections, escalate privileges to root, execute code in the kernel, or trigger denial-of-service conditions. Because AppArmor is widely used across enterprise servers, cloud platforms, container environments, and …

Qualys TRU discovers 'CrackArmor'

The Qualys Threat Research Unit (TRU) has announced its discovery of “CrackArmor,” a set of nine vulnerabilities within AppArmor, a widely used security module in the Linux kernel. These flaws have left over 12 million enterprise systems running Ubuntu, Debian, and SUSE distributions exposed since 2017, enabling local attackers to gain full root access, execute container breakouts, and cause system-wide crashes. The CrackArmor vulnerabilities ex…

Nine critical vulnerabilities in Linux AppArmor put over 12M enterprise systems at risk

Security researchers at Qualys have disclosed nine vulnerabilities in AppArmor, the Linux Security Module that ships enabled by default across Ubuntu, Debian, and SUSE distributions. An unprivileged local attacker can exploit the flaws to gain full root access, break out of container isolation, and crash systems, all without requiring administrative credentials, the researchers said in a blog post. Dubbed “CrackArmor” by the Qualys Threat Resear…