CrackArmor: Nine AppArmor Flaws Let Local Users Escalate to Root — What Organizations Need to Know
AppArmor, a widely deployed Linux Mandatory Access Control (MAC) framework, is at the center of a set of serious vulnerabilities that researchers have dubbed “CrackArmor.” Disclosed on March 12, 2026 by the Qualys Threat Research Unit (TRU), the collection of flaws affects AppArmor’s implementation as a Linux Security Module (LSM) and has been present in the upstream kernel since around version 4.11 (2017). Because AppArmor ships enabled by default on…