Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-47333

Out-of-bounds read in Ubuntu Linux AppArmor notification handling

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical Ubuntu Linux

Default version status: unaffected

  • 6.8.0 to < 6.8.0-124.124affected
  • 6.17.0 to < 6.17.0-35.35affected
  • 7.0.0 to < 7.0.0-22.22affected

References