Summary
It was discovered that the AppArmor policy compiler incorrectly generated
looser restrictions than expected for rules allowing mount operations. A
local attacker could possibly use this to bypass AppArmor restrictions in
applications where some mount operations were permitted.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | apparmor | 2.13.3-7ubuntu5.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | apparmor | 3.0.4-2ubuntu2.4 |
Vulnerabilities 1
-
Low 3.9
AppArmor mount rules grant excessive permissions
In all versions of AppArmor mount rules are accidentally widened when compiled.