CVE-2026-47333Disclosure(canonical / ubuntu_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch canonical ubuntu_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.

canonical CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=635fa30ed9e944bdb7e811fb8a8906286b4b4f06

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ubuntu_linux

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 1d ago at 2 mentions (2026-05-28); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

canonical

Products

ubuntu_linux

3 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-28	2	Disclosure2
2026-06-05	1	Patch1

Full discourse3 posts

ThreatCluster@threatcluster129d
Patch
Ubuntu fixed multiple Linux kernel flaws affecting 5 releases, including privilege-escalation bug CVE-2026-47333, in security notices USN-8371, USN-8388 and USN-8389, according to Canonical. https://threatcluster.io/cluster/critical-linux-kernel-vulnerabilities-affect-multiple-ubuntu-46cfb452
Post summary
Ubuntu has released security updates fixing several kernel vulnerabilities, including the privilege-escalation flaw CVE-2026-47333, with related USN patches. No active exploitation or PoC is reported.
0101095
311 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters137d
Disclosure
CVE-2026-47333 is a high-severity vulnerability (CVSS 7.8) affecting the AppArmor Linux Security Module (LSM) in Ubuntu Linux kernels 6.8, 6.17, and 7.0. The flaw resides in @ubuntu #ubuntu #linux #DevSecOps #Devops #Developers #infosec #sysadmin https://www.valtersit.com/cve/CVE-2026-47333/
Post summary
The statement discloses CVE‑2026‑47333 as a high‑severity AppArmor LSM vulnerability affecting Ubuntu kernels 6.8, 6.17, and 7.0 with a CVSS score of 7.8. No proof of concept, exploit details, active exploitation, patch information, or debunking claim is provided.
0000086
904 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-47333 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-o… https://www.cve.org/CVERecord?id=CVE-2026-47333
Post summary
The entry reports a buffer‑overflow flaw in AppArmor SAUCE patches affecting Ubuntu 6.8, 6.17, and 7.0, highlighting a heap memory out‑of‑bounds vulnerability without mentioning exploitation or mitigation.
00000149
57.5K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	canonical	ubuntu_linux	24.04	-	-
OS	canonical	ubuntu_linux	25.10	-	-
OS	canonical	ubuntu_linux	26.04	-	-

Explore more

Back to dashboard canonical CVEs ubuntu_linux vulnerabilities

What researchers are saying

CVE-2026-47333

ThreatCluster[verified]@threatclusterPatch

Ubuntu has released security updates fixing several kernel vulnerabilities, including the privilege-escalation flaw CVE-2026-47333, with related USN patches. No active exploitation or PoC is reported.

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersDisclosure

The statement discloses CVE‑2026‑47333 as a high‑severity AppArmor LSM vulnerability affecting Ubuntu kernels 6.8, 6.17, and 7.0 with a CVSS score of 7.8. No proof of concept, exploit details, active exploitation, patch information, or debunking claim is provided.

CVE@CVEnewDisclosure

The entry reports a buffer‑overflow flaw in AppArmor SAUCE patches affecting Ubuntu 6.8, 6.17, and 7.0, highlighting a heap memory out‑of‑bounds vulnerability without mentioning exploitation or mitigation.