CVE-2026-47336 | THREATINT

Description

Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code. The bug can be triggered by an unprivileged local user and could result in incorrect fine-grained mediation of network sockets.

PUBLISHED Reserved 2026-05-19 | Published 2026-05-28 | Updated 2026-05-28 | Assigner canonical

LOW: 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Problem types

CWE-457 Use of uninitialized variable

Product status

Default status

unaffected

6.8.0 (dpkg) before 6.8.0-124.124

affected

Credits

Tristan Madani (@TristanInSec), Talence Security finder

References

git.launchpad.net/...37c6a70fe7b435322c334554002809a4e7b7293 patch

cve.org (CVE-2026-47336)

nvd.nist.gov (CVE-2026-47336)

Download JSON