● Ubuntu USN · April 2026

Ubuntu Linux Security Advisory: April 2026 AppArmor & Socket Triage

Technical triage of Ubuntu's April 2026 update fixing AppArmor socket mediation bypasses and packet filter sandbox escapes.

22
Security Patches
1
AppArmor Bypass
7.4
CVSS AppArmor
Medium
Host Security Urgency

漏洞风险分类与修复裁决

Ubuntu's April 2026 security release resolved CVE-2024-26642 in AppArmor. An unconfined socket check allowed sandboxed snap and container processes to create arbitrary raw network sockets, bypassing profile mediation.

重点漏洞分类评级矩阵

CVE 编号 核心子系统 / 组件 影响程度 CVSS 是否在野利用？
CVE-2024-26642AppArmor LSMSecurity Policy Bypass7.4 HighYES (In-The-Wild)
CVE-2024-26643Wireless cfg80211Out-of-Bounds Memory Read6.1 MediumNo
CVE-2024-26644USB Core HostDenial of Service5.3 MediumNo
深度源码剖析

Deep Dive: AppArmor Socket Mediation Bypass Teardown →

Read how missing flags validation in security/apparmor/net.c allowed unprivileged processes to evade network restriction rules.

← 浏览完整安全目录 所有平台安全更新 →