6.1
Medium
CVE-2026-47328 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was…
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu Linux 7.0 | 7.0.0 → < 7.0.0-22.22 | 7.0.0-22.22 |
| Ubuntu Linux 6.17 | 6.17.0 → < 6.17.0-35.35 | 6.17.0-35.35 |
| Ubuntu Linux 6.8 | 6.8.0 → < 6.8.0-124.124 | 6.8.0-124.124 |
Other CVEs of Ubuntu Linux
The 13 CVEs of Ubuntu Linux →
CVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of…
3.3
Low
CVE-2026-47336
Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6…
3.3
Low
CVE-2026-47335
Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor…
5.5
Medium
CVE-2026-47334
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in…
5.5
Medium