CVE-2026-47336: low-severity vulnerability in Canonical Ubuntu Linux
Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules
Published
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code. The bug can be triggered by an unprivileged local user and could result in incorrect fine-grained mediation of network sockets.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
Canonical · Ubuntu LinuxRelated CVEs — Canonical Ubuntu Linux
In the same product, most dangerous first.
CVE-2026-47331HIGHUse-after-free in Ubuntu Linux AppArmor notification handlingEPSS 0.2%CVE-2026-47333HIGHOut-of-bounds read in Ubuntu Linux AppArmor notification handlingEPSS 0.2%CVE-2025-13350HIGHUse-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernelEPSS 0.2%CVE-2026-47332MEDIUMOut-of-bounds read in Ubuntu Linux AppArmor notification handlingEPSS 0.1%CVE-2026-47335MEDIUMNULL pointer dereference in Ubuntu Linux AppArmor notification handlingEPSS 0.1%CVE-2026-47328MEDIUMInvalid pointer deallocation in Ubuntu Linux AppArmor notification handlingEPSS 0.1%