Debian 11 Privilege Escalation Vulnerabilities Addressed in Recent Updates

The Qualys Threat Research Unit (TRU) identified multiple vulnerabilities in Apparmor affecting Debian 11 (Bullseye) and the stable distribution (Trixie). For Debian 11, the vulnerabilities have been patched in version 6.1.164-1~deb11u1 for the linux-6.1 packages and version 5.10.251-1 for the linux packages. These updates also address regressions and include additional bug fixes. Users are strongly advised to upgrade their systems to mitigate potential privilege escalation and denial of service risks. The vulnerabilities were disclosed in advisories DLA-4499 and DLA-4498, both published on 2026-03-13. The stable distribution (Trixie) received a fix in version 6.12.74-2 as noted in DSA-6162 on 2026-03-12. The overall impact of these vulnerabilities is significant, as they could allow unauthorized access and control over affected systems.

Key Points: • Multiple vulnerabilities in Apparmor affect Debian 11 and Trixie distributions. • Critical updates released for linux-6.1 and linux packages to address privilege escalation. • Users are urged to upgrade their systems immediately to avoid exploitation.