Executive brief
A security flaw in the Ubuntu Linux kernel's AppArmor component could allow a local user to bypass certain network security restrictions. AppArmor is a security system that limits what programs can do, and this bug specifically affects how it monitors internet-based network connections. While the risk is low, it could lead to a situation where security policies are not correctly enforced for specific network activities.
Technical details
A use of an uninitialized variable (CWE-457) exists in the AppArmor AF_INET/AF_INET6 socket mediation code within Ubuntu-specific 'SAUCE' patches for Linux kernel 6.8. An unprivileged local attacker can trigger this bug to cause incorrect fine-grained mediation of network sockets. This effectively results in a partial loss of integrity for the security policy enforcement. The issue is addressed in the Ubuntu kernel source tree via a specific commit to the 'noble' branch.
Affected products
- Ubuntu Linux Kernel 6.8 (Ubuntu) 6.8 with SAUCE patches
Timeline
- 2026-05-28: disclosed
- 2026-05-28: advisory