CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root
Qualys TRU discovered critical AppArmor vulnerabilities named "CrackArmor" that allow unprivileged users to escalate privileges to root and bypass kernel protections, affecting over 12.6 million systems globally since 2017. The vulnerabilities enable container isolation breakout and require immediate kernel patching to remediate. These confused deputy flaws represent a significant local privilege escalation risk for Linux systems using AppArmor mandatory access control.
Summary
Qualys TRU discovered critical AppArmor vulnerabilities named "CrackArmor" that allow unprivileged users to escalate privileges to root and bypass kernel protections, affecting over 12.6 million systems globally since 2017. The vulnerabilities enable container isolation breakout and require immediate kernel patching to remediate. These confused deputy flaws represent a significant local privilege escalation risk for Linux systems using AppArmor mandatory access control.
Indicators of Compromise
- malware — CrackArmor