CVE-2026-47331 · cross-distro fix matrix

CVE-2026-47331: Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-fre

Affects 2 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-05-28.

CVSS v3:HIGH · 7.8(NVD-published)

Fix per ecosystem

Each block below is a distro release where CVE-2026-47331 has a known fix. Run the listed command on that distro to remediate.

Ubuntu noble

Source: Ubuntu USN

linux-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-azure-fips
```
linux-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-azure-fips-6.8
```
linux-azure-fips-cloud-tools-6.8.0-1059→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-azure-fips-cloud-tools-6.8.0-1059
```
linux-azure-fips-headers-6.8.0-1059→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-azure-fips-headers-6.8.0-1059
```
linux-azure-fips-tools-6.8.0-1059→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-azure-fips-tools-6.8.0-1059
```
linux-buildinfo-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1059-azure-fips
```
linux-cloud-tools-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-6.8.0-1059-azure-fips
```
linux-cloud-tools-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-azure-fips
```
linux-cloud-tools-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-azure-fips-6.8
```
linux-headers-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-headers-6.8.0-1059-azure-fips
```
linux-headers-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-headers-azure-fips
```
linux-headers-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-headers-azure-fips-6.8
```
linux-image-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-6.8.0-1059-azure-fips
```
linux-image-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-azure-fips
```
linux-image-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-azure-fips-6.8
```
linux-image-hmac-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-hmac-6.8.0-1059-azure-fips
```
linux-image-unsigned-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-unsigned-6.8.0-1059-azure-fips
```
linux-image-unsigned-hmac-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-image-unsigned-hmac-6.8.0-1059-azure-fips
```
linux-modules-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-6.8.0-1059-azure-fips
```
linux-modules-extra-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-extra-6.8.0-1059-azure-fips
```
linux-modules-extra-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-extra-azure-fips
```
linux-modules-extra-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-extra-azure-fips-6.8
```
linux-modules-involflt-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-involflt-6.8.0-1059-azure-fips
```
linux-modules-involflt-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-involflt-azure-fips
```
linux-modules-involflt-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-involflt-azure-fips-6.8
```
linux-modules-iwlwifi-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-iwlwifi-6.8.0-1059-azure-fips
```
linux-modules-iwlwifi-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-iwlwifi-azure-fips
```
linux-modules-iwlwifi-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-modules-iwlwifi-azure-fips-6.8
```
linux-tools-6.8.0-1059-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-tools-6.8.0-1059-azure-fips
```
linux-tools-azure-fips→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-tools-azure-fips
```
linux-tools-azure-fips-6.8→ fixed in6.8.0-1059.65+fips1USN-8393-1
```
sudo apt-get install --only-upgrade -y linux-tools-azure-fips-6.8
```

Ubuntu jammy

Source: Ubuntu USN

linux-aws-6.8→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-6.8
```
linux-gcp-6.8→ fixed in6.8.0-1060.63~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-gcp-6.8
```
linux-hwe-6.8→ fixed in6.8.0-124.124~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-hwe-6.8
```
linux-ibm-6.8→ fixed in6.8.0-1057.58~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-ibm-6.8
```
linux-nvidia-6.8→ fixed in6.8.0-1055.58~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-nvidia-6.8
```
linux-oracle-6.8→ fixed in6.8.0-1054.55~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-oracle-6.8
```
linux-realtime-6.8→ fixed in6.8.1-1052.53~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-realtime-6.8
```
linux-aws→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws
```
linux-aws-6.8-cloud-tools-6.8.0-1057→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-6.8-cloud-tools-6.8.0-1057
```
linux-aws-6.8-headers-6.8.0-1057→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-6.8-headers-6.8.0-1057
```
linux-aws-6.8-tools-6.8.0-1057→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-6.8-tools-6.8.0-1057
```
linux-aws-64k→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-64k
```
linux-aws-64k-6.8→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-64k-6.8
```
linux-aws-64k-edge→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-64k-edge
```
linux-aws-edge→ fixed in6.8.0-1057.60~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-aws-edge
```
linux-buildinfo-6.8.0-1054-oracle→ fixed in6.8.0-1054.55~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1054-oracle
```
linux-buildinfo-6.8.0-1054-oracle-64k→ fixed in6.8.0-1054.55~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1054-oracle-64k
```
linux-buildinfo-6.8.0-1055-nvidia→ fixed in6.8.0-1055.58~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1055-nvidia
```
linux-buildinfo-6.8.0-1055-nvidia-64k→ fixed in6.8.0-1055.58~22.04.1USN-8373-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1055-nvidia-64k
```

Are YOU affected by CVE-2026-47331?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan View on NVD

Continuous monitoring beats manual checking

CVE-2026-47331dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.

See StackPatch ($99 lifetime)