CVE-2026-47329

Summary

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.

Affected Software

VendorProductVersion RangeStatus
CanonicalUbuntu Linux6.8.0 < 6.8.0-124.124affected
CanonicalUbuntu Linux6.17.0 < 6.17.0-35.35affected
CanonicalUbuntu Linux7.0.0 < 7.0.0-22.22affected

Weaknesses

  • CWE-1284: CWE-1284 Improper validation of specified quantity in input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References