CVE-2024-46721: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-46721 is a vulnerability in the Linux kernel's AppArmor security module that was discovered and disclosed in September 2024. The issue involves a NULL pointer dereference in the AppArmor filesystem code, specifically in the profile->parent->dents[AAFSPROFDIR] pointer handling (NVD).

The vulnerability occurs when profile->parent->dents[AAFSPROFDIR] could be NULL if its parent is created from _createmissingancestors() and 'ent->old' is NULL in aareplace_profiles(). This condition leads to a kernel NULL pointer dereference at address 0x30. The issue has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can result in a kernel NULL pointer dereference, which leads to a denial of service condition through a system crash. The issue affects local system stability and availability (NVD).

The issue has been fixed in the Linux kernel through a patch that adds a NULL pointer check and returns an appropriate error code (-ENOENT) when the condition is detected. The fix has been backported to multiple stable kernel versions (Kernel Patch).