CVE-2026-47330 — Use of uninitialized value in Ubuntu Linux AppArmor notification handling

CVE-2026-47330

Use of uninitialized value in Ubuntu Linux AppArmor notification handling PUBLISHED

Description (CNA)

Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu Linux	affected 6.8.0 before 6.8.0-124.124; affected 6.17.0 before 6.17.0-35.35; affected 7.0.0 before 7.0.0-22.22

CWE

CWE-457

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9b2c6eded493fa50e7c8cd3618d7ebe1358abaab

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.