CVE-2026-47331 — Use-after-free in Ubuntu Linux AppArmor notification handling

CVE-2026-47331

Use-after-free in Ubuntu Linux AppArmor notification handling PUBLISHED

Description (CNA)

Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-free (UAF) and, theoretically, arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu Linux	affected 6.8.0 before 6.8.0-124.124

CWE

CWE-416

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=5e5cd4759b63363373faf1ce15d1cab3606d6ec8

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.