[PATCH 6.6.y 0/2] apparmor: backport CVE-2026-45893, CVE-2026-46254

[Artem Dinaburg]

Hi Greg, Sasha, and maintainers,

I'm working through the smaller CVE backports still missing from 6.6.y.
These 2 upstream changes belong together for CVE-2026-45893,
CVE-2026-46254. They must be applied in this order because the later change
depends on or completes the earlier one.

The complete series is already present in 6.12.y, 6.18.y, and 7.2.y.
These fixes also affect 6.1.y, which will need a separate backport; this
series is only for 6.6.y.

Could you please consider this series for 6.6.y?

Thanks,
Artem Dinaburg

Series:
  1. AppArmor: Allow apparmor to handle unaligned dfa tables
  2. apparmor: Fix & Optimize table creation from possibly unaligned memory