● Ubuntu USN · April 2026

Ubuntu Linux Security Advisory: April 2026 AppArmor & Socket Triage

Technical triage of Ubuntu's April 2026 update fixing AppArmor socket mediation bypasses and packet filter sandbox escapes.

Security Patches

AppArmor Bypass

7.4

CVSS AppArmor

Medium

Host Security Urgency

Triagem Executiva e Veredito de Risco

Ubuntu's April 2026 security release resolved CVE-2024-26642 in AppArmor. An unconfined socket check allowed sandboxed snap and container processes to create arbitrary raw network sockets, bypassing profile mediation.

Matriz Curada de Triagem de Vulnerabilidades

Identificador CVE	Subsistema / Componente	Impacto	CVSS	Exploração Ativa?
CVE-2024-26642	AppArmor LSM	Security Policy Bypass	7.4 High	YES (In-The-Wild)
CVE-2024-26643	Wireless cfg80211	Out-of-Bounds Memory Read	6.1 Medium	No
CVE-2024-26644	USB Core Host	Denial of Service	5.3 Medium	No

ANÁLISE DE CÓDIGO EM DESTAQUE

Deep Dive: AppArmor Socket Mediation Bypass Teardown →

Read how missing flags validation in security/apparmor/net.c allowed unprivileged processes to evade network restriction rules.

← Navegar no Diretório de Segurança Todas as Atualizações de Segurança →