CVE-2026-47330

Use of uninitialized value in Ubuntu Linux AppArmor notification handling

CVSS 3.3 LOWEPSS 0.1%CWE-457

Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Canonical · Ubuntu Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9b2c6eded493fa50e7c8cd3618d7ebe1358abaab