PT-2026-44482 · Canonical · Apparmor+1

Georgia Garcia · Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-47333

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ubuntu Linux version 6.8 Ubuntu Linux version 6.17 Ubuntu Linux version 7.0

Description AppArmor SAUCE patches contain a flaw that can lead to an incorrect computation of an internal buffer size. This results in a heap memory out-of-bounds read—a condition where the system reads data past the end of the intended buffer—within the notification handling code. An unprivileged local user can trigger this issue, causing the AppArmor DFA policy engine to process invalid data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-47333

Affected Products

Apparmor

Ubuntu

References · 4

• https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=635fa30ed9e944bdb7e811fb8a8906286b4b4f06 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-47333 · Security Note
• https://twitter.com/CVEnew/status/2060091949546160549 · Twitter Post
• https://twitter.com/HugoValters/status/2060093163516129364 · Twitter Post