3.3
Low
CVE-2026-47329 Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor…
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu Linux 7.0 | 7.0.0 → < 7.0.0-22.22 | 7.0.0-22.22 |
| Ubuntu Linux 6.17 | 6.17.0 → < 6.17.0-35.35 | 6.17.0-35.35 |
| Ubuntu Linux 6.8 | 6.8.0 → < 6.8.0-124.124 | 6.8.0-124.124 |
References
- git.launchpad.net git.launchpad.net
Timeline
- Published
- Last modified
Other CVEs of Ubuntu Linux
The 13 CVEs of Ubuntu Linux →
CVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of…
3.3
Low
CVE-2026-47336
Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6…
3.3
Low
CVE-2026-47335
Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor…
5.5
Medium
CVE-2026-47334
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in…
5.5
Medium