● Ubuntu USN · April 2026

Ubuntu Linux Security Advisory: April 2026 AppArmor & Socket Triage

Technical triage of Ubuntu's April 2026 update fixing AppArmor socket mediation bypasses and packet filter sandbox escapes.

Security Patches

AppArmor Bypass

7.4

CVSS AppArmor

Medium

Host Security Urgency

Triage Exécutif et Verdict de Risque

Ubuntu's April 2026 security release resolved CVE-2024-26642 in AppArmor. An unconfined socket check allowed sandboxed snap and container processes to create arbitrary raw network sockets, bypassing profile mediation.

Matrice de Triage des Vulnérabilités

Identifiant CVE	Sous-système / Composant	Impact	CVSS	Exploitation Active ?
CVE-2024-26642	AppArmor LSM	Security Policy Bypass	7.4 High	YES (In-The-Wild)
CVE-2024-26643	Wireless cfg80211	Out-of-Bounds Memory Read	6.1 Medium	No
CVE-2024-26644	USB Core Host	Denial of Service	5.3 Medium	No

ANALYSE DE CODE DÉTAILLÉE

Deep Dive: AppArmor Socket Mediation Bypass Teardown →

Read how missing flags validation in security/apparmor/net.c allowed unprivileged processes to evade network restriction rules.

← Parcourir l'Annuaire de Sécurité Tous les Bulletins de Sécurité →