CVE-2026-47331

Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-free (UAF) and, theoretically, arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@ubuntu.com

Published

2026-05-28

Last modified

2026-10-26

Weaknesses

CWE-416

Affected products

• Ubuntu Linux (Canonical)

References

• https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=5e5cd4759b63363373faf1ce15d1cab3606…