CVE-2026-47336 — Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules

CVE-2026-47336

Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules PUBLISHED

Description (CNA)

Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code. The bug can be triggered by an unprivileged local user and could result in incorrect fine-grained mediation of network sockets.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu Linux	affected 6.8.0 before 6.8.0-124.124

CWE

CWE-457

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=f37c6a70fe7b435322c334554002809a4e7b7293

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.