Threats Tagged 'cve-2026-47333'

CVE-2026-47333 is a high-severity vulnerability in Ubuntu Linux versions 6.8.0, 6.17.0, and 7.0.0 involving an out-of-bounds read in the AppArmor notification handling code. The issue arises from incorrect computation of an internal buffer size due to AppArmor SAUCE patches, allowing an unprivileged local user to trigger a heap memory out-of-bounds read. This can cause invalid data to be processed by the AppArmor DFA policy engine, potentially impacting confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by Canonical.

Ubuntu Linux kernels 6.8, 6.17, and 7.0 contain AppArmor patches that incorrectly compute the size of an internal buffer, resulting in a heap out-of-bounds read during notification handling. This vulnerability can be triggered by an unprivileged local user and may lead to kernel memory corruption and potentially influence AppArmor policy processing. The issue is tracked as CVE-2026-47333 and has a high severity with a CVSS score of 7.8. Multiple affected versions are identified, and a patch is available from Ubuntu.