Critical: Crack Armor AppArmor Vulnerabilities Allow Privilege Escalation (CVE-2026-23268, CVE-2026-23269)

[chrischangcode]

Describe the bug
Multiple critical vulnerabilities (collectively named Crack Armor) have been discovered in AppArmor, enabling local privilege escalation to root. These should be addressed as top priority for the security of Azure Linux.

CVE-2026-23268, CVE-2026-23269, and related pending CVEs are involved.

• Qualys Security Blog: CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root

Expected behavior
Please resolve CVEs in new version of Azure Linux and/or advise on mitigations