Cyber Resilience

CVE-2026-47330

LowUpdated

Published: 28 May 2026

Published
28 May 2026
Modified
17 June 2026
KEV Added
—
Patch
—
CVSS Score v3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0009 0.7th percentile
Risk Priority 15 floored blend · peak EPSS

Summary

CVE-2026-47330 is a low-severity Use of Uninitialized Variable (CWE-457) vulnerability in Canonical Ubuntu Linux. Its CVSS base score is 3.3 (Low).

Operationally, exploitation aligns with the MITRE ATT&CK technique Disable or Modify Tools (T1685); ranked at the 0.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching…

more

of AppArmor notification responses.

CWE(s)
CWE-457

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1685 Disable or Modify Tools Defense Impairment
Adversaries may disable, degrade, or tamper with security tools or applications (e.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Uninitialized variable in AppArmor notification handling enables local bypass of mandatory access controls (defense impairment) and can be leveraged for privilege escalation by an unprivileged user.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

Affected Assets

canonical
ubuntu linux
24.04, 25.10, 26.04

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References