CVE-2026-47332

Summary

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.

Affected Software

VendorProductVersion RangeStatus
CanonicalUbuntu Linux6.8.0 < 6.8.0-124.124affected
CanonicalUbuntu Linux6.17.0 < 6.17.0-35.35affected
CanonicalUbuntu Linux7.0.0 < 7.0.0-22.22affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References