CVE-2026-47330CWE-457

Use of uninitialized value in Ubuntu Linux AppArmor notification handling

Low · published May 28, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2026-05-28T18:27Z
EPSS history
Timeline
  • 28 MAY 18:27Z
    Use of uninitialized value in Ubuntu Linux AppArmor notification handling
    cvelistv5