7.8
High
CVE-2026-47333 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an…
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu Linux 7.0 | 7.0.0 → < 7.0.0-22.22 | 7.0.0-22.22 |
| Ubuntu Linux 6.17 | 6.17.0 → < 6.17.0-35.35 | 6.17.0-35.35 |
| Ubuntu Linux 6.8 | 6.8.0 → < 6.8.0-124.124 | 6.8.0-124.124 |
References
- git.launchpad.net git.launchpad.net
Timeline
- Published
- Last modified
Other CVEs of Ubuntu Linux
The 13 CVEs of Ubuntu Linux →
CVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of…
3.3
Low
CVE-2026-47336
Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6…
3.3
Low
CVE-2026-47335
Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor…
5.5
Medium
CVE-2026-47334
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in…
5.5
Medium