A flaw in the Linux kernel’s AppArmor subsystem allows tables to be created from a source blob that may be unaligned. The kernel copies this data without ensuring proper alignment, which can trigger unaligned memory accesses. Such accesses may cause a fault or corrupt kernel memory, potentially leading to a system crash or compromise of critical data.

All Linux kernel configurations that include the AppArmor module are vulnerable until the patch that prevents unaligned accesses is applied. This includes standard upstream releases and any derivative kernels that have not integrated the recent commit fixing the issue. No specific version range is provided, so any kernel running an unpatched AppArmor module is at risk.

The EPSS score of less than 1 percent indicates that the likelihood of active exploitation is very low, and the vulnerability is not listed in the CISA KEV catalog. However, the flaw can be triggered by a local user who can influence the content of an AppArmor table, making the attack vector local. The consequence of reaching the flaw is a kernel fault that could bring the system down, constituting a denial‑of‑service scenario. While the description does not confirm privilege escalation, the presence of kernel memory corruption implies that such escalation could be possible in certain contexts.