A double free vulnerability in the Linux kernel AppArmor module could allow an authenticated local attacker to cause a system crash or potentially execute arbitrary code.

This is a memory management flaw specifically involving a double free of the ns_name pointer within the aa_replace_profiles function. The vulnerability is reachable by a local user with sufficient privileges to interact with the AppArmor security module.

Successful exploitation of this vulnerability could lead to a kernel panic, resulting in a denial of service for the affected host. Furthermore, memory corruption vulnerabilities in the kernel often provide a pathway for local privilege escalation, which poses a significant risk to the integrity and confidentiality of the entire operating system. Given the CVSS score of 7.8, this flaw represents a high-severity risk that should be addressed in accordance with standard patch management cycles.

Immediate Action: Update the Linux kernel to versions 5.10.253, 5.15.203, 6.1.169, 6.6.130, or newer, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages that may indicate memory corruption or unexpected process termination.

Compensating Controls: Restrict access to sensitive system calls and AppArmor configuration interfaces to highly trusted users to minimize the attack surface.

Public Exploit Available: Unknown.

This vulnerability presents a high risk due to its potential impact on system stability and local security posture. Administrators should prioritize testing and deploying the provided kernel patches across all affected environments. Ensuring that kernel updates are applied promptly is essential to neutralizing the threat of local exploitation and maintaining system integrity.