CVE-2016-1585: Canonical Apparmor

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

In all versions of AppArmor mount rules are accidentally widened when compiled.

Affected products

• Canonical Apparmor: before 2.13.10 (fixed in 2.13.10); from 3.0.0, before 3.0.12 (fixed in 3.0.12); from 3.1.0, before 3.1.6 (fixed in 3.1.6)

Published 2019-04-22. Last modified 2026-06-17.