CVE-2026-47333
Fixed in a distro release EPSS <1%CVSS 7.8
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.
Products: canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:16.04:LTS | linux-hwe-edge | no fix |
| Ubuntu:18.04:LTS | linux-aws-5.0 | no fix |
| Ubuntu:18.04:LTS | linux-aws-5.3 | no fix |
| Ubuntu:18.04:LTS | linux-azure | no fix |
| Ubuntu:18.04:LTS | linux-azure-5.3 | no fix |
| Ubuntu:18.04:LTS | linux-azure-edge | no fix |
| Ubuntu:18.04:LTS | linux-gcp | no fix |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | no fix |
| Ubuntu:18.04:LTS | linux-gke-4.15 | no fix |
| Ubuntu:18.04:LTS | linux-gke-5.4 | no fix |
| Ubuntu:18.04:LTS | linux-gkeop-5.4 | no fix |
| Ubuntu:18.04:LTS | linux-hwe | no fix |
| Ubuntu:18.04:LTS | linux-hwe-edge | no fix |
| Ubuntu:18.04:LTS | linux-oem | no fix |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | no fix |
| Ubuntu:18.04:LTS | linux-oracle-5.3 | no fix |
| Ubuntu:20.04:LTS | linux-aws-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-aws-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-aws-5.8 | no fix |
| Ubuntu:20.04:LTS | linux-azure-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-azure-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-azure-5.8 | no fix |
| Ubuntu:20.04:LTS | linux-azure-fde | no fix |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-gcp-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-gcp-5.8 | no fix |
| Ubuntu:20.04:LTS | linux-gke | no fix |
| Ubuntu:20.04:LTS | linux-gke-5.15 | no fix |
| Ubuntu:20.04:LTS | linux-gkeop | no fix |
| Ubuntu:20.04:LTS | linux-gkeop-5.15 | no fix |
| Ubuntu:20.04:LTS | linux-hwe-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-hwe-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-hwe-5.8 | no fix |
| Ubuntu:20.04:LTS | linux-intel-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-oem-5.10 | no fix |
| Ubuntu:20.04:LTS | linux-oem-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-oem-5.14 | no fix |
| Ubuntu:20.04:LTS | linux-oem-5.6 | no fix |
| Ubuntu:20.04:LTS | linux-oracle-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-oracle-5.13 | no fix |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | no fix |
| Ubuntu:20.04:LTS | linux-raspi2 | no fix |
| Ubuntu:20.04:LTS | linux-riscv | no fix |
| Ubuntu:20.04:LTS | linux-riscv-5.11 | no fix |
| Ubuntu:20.04:LTS | linux-riscv-5.8 | no fix |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1057.60~22.04.1 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1060.63~22.04.1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-124.124~22.04.1 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1057.58~22.04.1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1055.58~22.04.1 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1054.55~22.04.1 |
| Ubuntu:22.04:LTS | linux-realtime | no fix |
| Ubuntu:22.04:LTS | linux-riscv | no fix |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-124.124~22.04.1 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix |
| Ubuntu:24.04:LTS | linux | 6.8.0-124.124 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1057.60 |
| Ubuntu:24.04:LTS | linux-aws-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-aws-6.17 | 6.17.0-1017.17~24.04.1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1058.64 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-azure-6.17 | 6.17.0-1017.17~24.04.1 |
| Ubuntu:24.04:LTS | linux-azure-fde | 6.8.0-1058.65 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | no fix |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1060.63 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-gcp-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-gcp-6.17 | 6.17.0-1018.19~24.04.1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1055.61 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1042.45 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-hwe-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-hwe-6.17 | 6.17.0-35.35~24.04.1 |
| Ubuntu:24.04:LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1057.58 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-134.134.1 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1055.58 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-nvidia-6.17 | 6.17.0-1021.21 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1055.58.1 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1026.26 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | no fix |
| Ubuntu:24.04:LTS | linux-oem-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-oem-6.17 | 6.17.0-1024.24 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | no fix |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1054.55 |
| Ubuntu:24.04:LTS | linux-oracle-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-oracle-6.17 | 6.17.0-1016.16~24.04.1 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1057.61 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix |
| Ubuntu:24.04:LTS | linux-realtime | no fix |
| Ubuntu:24.04:LTS | linux-riscv | no fix |
| Ubuntu:24.04:LTS | linux-riscv-6.14 | no fix |
| Ubuntu:24.04:LTS | linux-riscv-6.17 | 6.17.0-35.35.1~24.04.1 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1032.33 |
| Ubuntu:25.10 | linux | 6.17.0-35.35 |
| Ubuntu:25.10 | linux-aws | 6.17.0-1017.17 |
| Ubuntu:25.10 | linux-azure | 6.17.0-1017.17 |
| Ubuntu:25.10 | linux-azure-fde | no fix |
| Ubuntu:25.10 | linux-gcp | 6.17.0-1018.19 |
| Ubuntu:25.10 | linux-oracle | 6.17.0-1016.16 |
| Ubuntu:25.10 | linux-raspi | 6.17.0-1018.18 |
| Ubuntu:25.10 | linux-realtime | 6.17.0-1014.16 |
| Ubuntu:25.10 | linux-riscv | 6.17.0-35.35.1 |
| Ubuntu:26.04:LTS | linux | 7.0.0-22.22 |
| Ubuntu:26.04:LTS | linux-aws | 7.0.0-1006.6 |
| Ubuntu:26.04:LTS | linux-azure | 7.0.0-1007.7 |
| Ubuntu:26.04:LTS | linux-azure-fde | 7.0.0-1006.6 |
| Ubuntu:26.04:LTS | linux-gcp | 7.0.0-1005.5 |
| Ubuntu:26.04:LTS | linux-ibm | 7.0.0-1007.7 |
| Ubuntu:26.04:LTS | linux-nvidia | 7.0.0-1009.9 |
| Ubuntu:26.04:LTS | linux-oem-7.0 | 7.0.0-1008.8 |
| Ubuntu:26.04:LTS | linux-oracle | 7.0.0-1005.5 |
| Ubuntu:26.04:LTS | linux-raspi | 7.0.0-1011.11 |
| Ubuntu:26.04:LTS | linux-realtime | 7.0.0-22.22.1 |
| Ubuntu:26.04:LTS | linux-riscv | 7.0.0-22.22.1 |
| Ubuntu:Nvidia-BlueField:24.04:LTS | linux-bluefield | 6.8.0-1023.27 |
| Ubuntu:Pro:16.04:LTS | linux | 4.4.0-284.318 |
| Ubuntu:Pro:16.04:LTS | linux-aws | 4.4.0-1195.210 |
| Ubuntu:Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1195.208~16.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-azure | 4.15.0-1205.220~16.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-gcp | 4.15.0-1188.205~16.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-hwe | 4.15.0-254.266~16.04.1 |
| Ubuntu:Pro:18.04:LTS | linux | 4.15.0-254.266 |
| Ubuntu:Pro:18.04:LTS | linux-aws | 4.15.0-1195.208 |
| Ubuntu:Pro:18.04:LTS | linux-azure-4.15 | 4.15.0-1205.220 |
| Ubuntu:Pro:18.04:LTS | linux-gcp-4.15 | 4.15.0-1188.205 |
| Ubuntu:Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-234.254~18.04.1 |
| Ubuntu:Pro:18.04:LTS | linux-oracle | 4.15.0-1158.169 |
| Ubuntu:Pro:20.04:LTS | linux | 5.4.0-234.254 |
| Ubuntu:Pro:22.04:LTS | linux | 5.15.0-187.197 |
| Ubuntu:Pro:22.04:LTS | linux-aws | 5.15.0-1113.120 |
| Ubuntu:Pro:22.04:LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 |
| Ubuntu:Pro:22.04:LTS | linux-azure | 5.15.0-1118.127 |
| Ubuntu:Pro:22.04:LTS | linux-gcp | 5.15.0-1114.124 |
| Ubuntu:Pro:22.04:LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 |
| Ubuntu:Pro:22.04:LTS | linux-gke | 5.15.0-1110.116 |
| Ubuntu:Pro:22.04:LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 |
| Ubuntu:Pro:22.04:LTS | linux-ibm | 5.15.0-1107.111 |
| Ubuntu:Pro:22.04:LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 |
| Ubuntu:Pro:24.04:LTS | linux | 6.8.0-136.136 |
| Ubuntu:Pro:24.04:LTS | linux-aws | 6.8.0-1061.64 |
| Ubuntu:Pro:24.04:LTS | linux-azure | 6.8.0-1063.71 |
| Ubuntu:Pro:24.04:LTS | linux-gcp | 6.8.0-1064.72 |
| Ubuntu:Pro:24.04:LTS | linux-gke | 6.8.0-1059.67 |
| Ubuntu:Pro:24.04:LTS | linux-ibm | 6.8.0-1061.62 |
| Ubuntu:Pro:24.04:LTS | linux-oracle | 6.8.0-1058.61 |
| Ubuntu:Pro:26.04:LTS | linux | 7.0.0-28.28 |
| Ubuntu:Pro:26.04:LTS | linux-aws | 7.0.0-1009.9 |
| Ubuntu:Pro:26.04:LTS | linux-azure | 7.0.0-1010.10 |
| Ubuntu:Pro:26.04:LTS | linux-gcp | 7.0.0-1008.8 |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | linux-aws-fips | 6.8.0-1057.60+fips1 |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | linux-azure-fips | 6.8.0-1059.65+fips1 |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | linux-fips | 6.8.0-124.124+fips1 |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | linux-gcp-fips | 6.8.0-1060.63+fips1 |
| Ubuntu:Pro:Realtime:22.04:LTS | linux-realtime-6.8 | 6.8.1-1052.53~22.04.1 |
| Ubuntu:Pro:Realtime:24.04:LTS | linux-raspi-realtime | 6.8.0-2046.47 |
| Ubuntu:Pro:Realtime:24.04:LTS | linux-realtime | 6.8.1-1052.53 |
| Ubuntu:Pro:Realtime:24.04:LTS | linux-realtime-6.14 | no fix |
| Ubuntu:Pro:Realtime:24.04:LTS | linux-realtime-6.17 | 6.17.0-1014.16~24.04.1 |