CVE-2026-47336CWE-457

CVE-2026-47336

Low · published May 28, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code. The bug can be triggered by an unprivileged local user and could result in incorrect fine-grained mediation of network sockets.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Weakness
CWE-457 · Use of Uninitialized Variable
Published
2026-05-28T23:16Z
Affected products (1)
ProductVersionsFixed in
canonical/ubuntu_linuxall versions—
References (1)
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=f37c6a70fe7b435322c334554002809a4e7b7293 · [email protected]
EPSS history
Timeline
  • 28 MAY 18:29Z
    Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules
    cvelistv5