CVE-2026-47333CWE-125

Out-of-bounds read in Ubuntu Linux AppArmor notification handling

High · published May 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-05-28T18:28Z
EPSS history
Timeline
  • 28 MAY 18:28Z
    Out-of-bounds read in Ubuntu Linux AppArmor notification handling
    cvelistv5