● Ubuntu USN · April 2026

Ubuntu Linux Security Advisory: April 2026 AppArmor & Socket Triage

Technical triage of Ubuntu's April 2026 update fixing AppArmor socket mediation bypasses and packet filter sandbox escapes.

22
Security Patches
1
AppArmor Bypass
7.4
CVSS AppArmor
Medium
Host Security Urgency

セキュリティトリアージとリスク評価

Ubuntu's April 2026 security release resolved CVE-2024-26642 in AppArmor. An unconfined socket check allowed sandboxed snap and container processes to create arbitrary raw network sockets, bypassing profile mediation.

優先脆弱性トリアージマトリックス

CVE識別番号 対象サブシステム / コンポーネント 影響範囲 CVSS ゼロデイ悪用確認？
CVE-2024-26642AppArmor LSMSecurity Policy Bypass7.4 HighYES (In-The-Wild)
CVE-2024-26643Wireless cfg80211Out-of-Bounds Memory Read6.1 MediumNo
CVE-2024-26644USB Core HostDenial of Service5.3 MediumNo
注目ソースコード分析

Deep Dive: AppArmor Socket Mediation Bypass Teardown →

Read how missing flags validation in security/apparmor/net.c allowed unprivileged processes to evade network restriction rules.

← セキュリティディレクトリ一覧 すべてのセキュリティ更新情報 →