The vulnerability is caused by an uninitialized variable in the AppArmor mediation code that processes AF_INET and AF_INET6 sockets in the Ubuntu Linux 6.8 kernel. An unprivileged local user can trigger the defect, leading the mediation engine to misjudge permissions for network sockets. The flaw could result in a user opening sockets that should be denied or preventing access to sockets that should be allowed, thereby affecting the intended network confinement of that user.

Canonical’s Ubuntu Linux products are impacted when they run kernel version 6.8 with the SAUCE patches that contain the vulnerable code. The issue applies to any system whose running kernel includes that exact revision, typically Ubuntu releases that ship the 6.8 kernel or later updates before the patch is applied.

The flaw is scored with a CVSS score of 3.3, indicating low severity, and there is no EPSS score available. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local, unprivileged access and only leads to incorrect mediation of network sockets. The likelihood of real-world exploitation is considered low, and the impact is limited to a single user's network activity rather than full system compromise.