PT-2026-44480 · Canonical+1 · Apparmor+2

CVE-2026-47331 · Published 2026-05-28 · Updated 2026-07-02

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ubuntu Linux version 6.8

Description AppArmor SAUCE patches fail to acquire a lock when modifying a linked list. This allows an unprivileged local user to trigger a race condition, which can lead to a use-after-free (UAF)—a situation where a program continues to use a pointer after it has been freed—and potentially result in arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-47331

USN-8373-1

USN-8393-1

USN-8440-1

USN-8497-1

USN-8499-1

Affected Products

Apparmor

Linuxmint

Ubuntu

References · 710

• https://ubuntu.com/security/CVE-2026-45902 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22994 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71069 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31478 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68733 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68820 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68347 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45852 · Vendor Advisory