Out-of-bounds Read in Canonical Ubuntu Linux
CVE-2026-47333
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (1.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Canonical Ubuntu Linux — versions 6.8.0, 6.17.0, 7.0.0
- Canonical Ubuntu_linux — versions 24.04, 25.10, 26.04
Weakness classification (CWE)
References
- security@ubuntu.com (Patch, patch)
Frequently asked questions
- What is CVE-2026-47333?
- CVE-2026-47333 is a high-severity vulnerability in Canonical Ubuntu Linux, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2026-05-28.
- How severe is CVE-2026-47333?
- High severity. CVSS v3 base score is 7.8 out of 10.