● Ubuntu USN · April 2026

Ubuntu Linux Security Advisory: April 2026 AppArmor & Socket Triage

Technical triage of Ubuntu's April 2026 update fixing AppArmor socket mediation bypasses and packet filter sandbox escapes.

Security Patches

AppArmor Bypass

7.4

CVSS AppArmor

Medium

Host Security Urgency

보안 릴리스 분석 및 위험성 평가

Ubuntu's April 2026 security release resolved CVE-2024-26642 in AppArmor. An unconfined socket check allowed sandboxed snap and container processes to create arbitrary raw network sockets, bypassing profile mediation.

핵심 취약점 트리아지 매트릭스

CVE 식별자	서브시스템 / 구성 요소	영향	CVSS	실제 악용 여부?
CVE-2024-26642	AppArmor LSM	Security Policy Bypass	7.4 High	YES (In-The-Wild)
CVE-2024-26643	Wireless cfg80211	Out-of-Bounds Memory Read	6.1 Medium	No
CVE-2024-26644	USB Core Host	Denial of Service	5.3 Medium	No

주목할 코드 분석

Deep Dive: AppArmor Socket Mediation Bypass Teardown →

Read how missing flags validation in security/apparmor/net.c allowed unprivileged processes to evade network restriction rules.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →