‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems

Qualys uncovers 'CrackArmor' vulnerabilities in AppArmor that could expose 12.6M Linux systems to root access and container escapes...

[SECURITY] [DLA 4499-1] linux-6.1 security update

Debian LTS Advisory DLA-4499-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 13, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.164-1deb11u1 CVE ID : CVE-2023-53424 CVE-2024-26822 CVE-2024-57895 CVE-2025-22026 CVE-2025-23155 CVE-2025-3778...

[SECURITY] [DLA 4498-1] linux security update

Debian LTS Advisory DLA-4498-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 13, 2026 https://wiki.debian.org/LTS Package : linux Version : 5.10.251-1 CVE ID : CVE-2022-50516 CVE-2025-38201 CVE-2025-71222 CVE-2025-71224 CVE-2025-71232 CVE-2025-71235...

Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation

Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy...

Debian dla-4499 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4499 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4499-1 [email protected]...

[SECURITY] [DSA 6162-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6162-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 12, 2026 https://www.debian.org/security/faq -...

CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root

Executive Summary Qualys TRU has discovered confused deputy vulnerabilities in AppArmor named "CrackArmor" that allow unprivileged users to bypass kernel protections, escalate to root, and break container isolation. The flaw has existed since 2017, and affected over 12.6 million systems globally...

[SECURITY] [DSA 6163-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6163-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 12, 2026 https://www.debian.org/security/faq -...

Debian dsa-6162 : ata-modules-6.12.74+deb13+1-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6162 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6162-1 [email protected] https://www.debian.org/securit...

Debian dsa-6163 : affs-modules-6.1.0-43-4kc-malta-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6163 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6163-1 [email protected] https://www.debian.org/securit...

PT-2026-29494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's AppArmor component contained a race condition between freeing data and filesystem access to it. AppArmor was releasing the reference to i private data after removing t...

PT-2026-29493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a race condition within the AppArmor subsystem that can lead to a use-after-free situation. This occurs because rawdata inodes are not properly reference counte...

CVE-2026-27002 OpenClaw: Docker container escape via unvalidated bind mount config injection

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 block...

GHSA-W235-X559-36MG OpenClaw: Docker container escape via unvalidated bind mount config injection

Summary A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. Affected Packages / Versions - Package: openclaw npm - Affected versions: =...

OpenClaw: Docker container escape via unvalidated bind mount config injection

Summary A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. Affected Packages / Versions - Package: openclaw npm - Affected versions: =...

PT-2026-20964

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.15 Description A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, potentially enabling container...

PT-2026-29490

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc7-next-20260127 Description The Linux kernel contains a flaw within the AppArmor subsystem, specifically in the verify dfa function. This function lacks a bounds check on the DEFAULT table when handling...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004922 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004910)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004910 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by...

MiracleLinux 9 : runc-1.1.9-1.el9 (AXSA:2023-6674:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6674:03 advisory. golang: crypto/tls: large handshake records may cause panics CVE-2022-41724 runc: Rootless runc makes /sys/fs/cgroup writable CVE-2023-25809 runc:...