A vulnerability in the Linux kernel AppArmor subsystem allows for potential out-of-bounds memory access, posing a risk of system instability or unauthorized information disclosure.

The match_char macro in AppArmor incorrectly evaluates its character parameter during differential encoding chain traversal, leading to pointer advancement that skips input characters. This results in an out-of-bounds read condition when the pointer exceeds the defined input buffer boundary.

Successful exploitation of this flaw can lead to kernel-level memory corruption, which typically results in system crashes (Denial of Service) or the potential leakage of sensitive kernel memory contents. Given the CVSS score of 7.8, this vulnerability is classified as High severity because it allows a local user with low privileges to compromise the integrity and availability of the underlying operating system.

Immediate Action: Update the Linux kernel to version 5.10.253, 5.15.203, 6.1.169, 6.6.130, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or KASAN-related reports that may indicate memory access violations occurring within the AppArmor module.

Compensating Controls: Ensure that access to the system is strictly limited to authorized users, as this vulnerability requires local access to trigger the flaw.

Public Exploit Available: Unknown

The risk posed by this kernel-level vulnerability is significant due to the potential for local privilege escalation or system-wide instability. Administrators should prioritize patching their Linux kernels to the specified stable versions as part of their next scheduled maintenance cycle or sooner if the environment handles untrusted local users.