CVE-2026-47330

{
  "id": "CVE-2026-47330",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-28T19:16:41.530",
  "lastModified": "2026-10-26T13:10:00.140",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses."
    },
    {
      "lang": "es",
      "value": "Ubuntu Linux 6.8, 7.17 y 7.0 contienen parches SAUCE de AppArmor que pueden, bajo ciertas circunstancias, usar una variable no inicializada en el código de manejo de notificaciones. El error puede ser activado por un usuario local sin privilegios y puede resultar en el almacenamiento en caché incorrecto de las respuestas de notificación de AppArmor."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Canonical",
          "product": "Ubuntu Linux",
          "defaultStatus": "unaffected",
          "collectionURL": "https://launchpad.net/ubuntu/+source/",
          "packageName": "linux",
          "modules": [
            "AppArmor"
          ],
          "repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/",
          "versions": [
            {
              "version": "6.8.0",
              "lessThan": "6.8.0-124.124",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "6.17.0",
              "lessThan": "6.17.0-35.35",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThan": "7.0.0-22.22",
              "versionType": "dpkg",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-28T19:19:48.305274Z",
          "id": "CVE-2026-47330",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-457"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "62D1BEC7-1A71-4991-A1A5-0E3D282100EC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "68D562DD-F22D-4310-93C7-7DE817104CAC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BB2642A-AA54-4949-A9FC-0E9673539350"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9b2c6eded493fa50e7c8cd3618d7ebe1358abaab",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    }
  ]
}