{"id":"CVE-2026-47330","state":"PUBLISHED","title":"Use of uninitialized value in Ubuntu Linux AppArmor notification handling","description":"Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses.","publishedAt":"2026-05-28T18:27:58.545Z","updatedAt":"2026-05-28T19:24:45.707Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"canonical"},"assigner":"canonical","products":["Canonical Ubuntu Linux"],"affected":[{"vendor":"Canonical","product":"Ubuntu Linux","packageName":"linux","defaultStatus":"unaffected","versions":[{"version":"6.8.0","status":"affected","lessThan":"6.8.0-124.124","versionType":"dpkg"},{"version":"6.17.0","status":"affected","lessThan":"6.17.0-35.35","versionType":"dpkg"},{"version":"7.0.0","status":"affected","lessThan":"7.0.0-22.22","versionType":"dpkg"}],"collectionURL":"https://launchpad.net/ubuntu/+source/","repo":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/","modules":["AppArmor"]}],"references":["https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9b2c6eded493fa50e7c8cd3618d7ebe1358abaab"],"weaknesses":["CWE-457"],"ingestedAt":"2026-10-29T20:12:07.131Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/47xxx/CVE-2026-47330.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-47330","state":"PUBLISHED","datePublished":"2026-05-28T18:27:58.545Z","dateUpdated":"2026-05-28T19:24:45.707Z","assignerShortName":"canonical","assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateReserved":"2026-05-19T10:37:36.433Z"},"containers":{"cna":{"title":"Use of uninitialized value in Ubuntu Linux AppArmor notification handling","descriptions":[{"lang":"en","value":"Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses."}],"affected":[{"vendor":"Canonical","product":"Ubuntu Linux","packageName":"linux","defaultStatus":"unaffected","versions":[{"version":"6.8.0","status":"affected","lessThan":"6.8.0-124.124","versionType":"dpkg"},{"version":"6.17.0","status":"affected","lessThan":"6.17.0-35.35","versionType":"dpkg"},{"version":"7.0.0","status":"affected","lessThan":"7.0.0-22.22","versionType":"dpkg"}],"collectionURL":"https://launchpad.net/ubuntu/+source/","repo":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/","modules":["AppArmor"]}],"references":[{"url":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9b2c6eded493fa50e7c8cd3618d7ebe1358abaab","tags":["patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"LOW","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-457","lang":"en","description":"CWE-457 Use of uninitialized variable","type":"CWE"}]}],"providerMetadata":{"shortName":"canonical","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateUpdated":"2026-05-28T18:27:58.545Z"},"credits":[{"lang":"en","value":"Tristan Madani (@TristanInSec), Talence Security","type":"finder"}],"source":{"discovery":"EXTERNAL"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-28T19:19:48.305274Z","id":"CVE-2026-47330","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-28T19:24:45.707Z"}}]}}}