5.5
Medium
CVE-2026-47332 Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal…
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu Linux 7.0 | 7.0.0 → < 7.0.0-22.22 | 7.0.0-22.22 |
| Ubuntu Linux 6.17 | 6.17.0 → < 6.17.0-35.35 | 6.17.0-35.35 |
| Ubuntu Linux 6.8 | 6.8.0 → < 6.8.0-124.124 | 6.8.0-124.124 |
References
- git.launchpad.net git.launchpad.net
Timeline
- Published
- Last modified
Other CVEs of Ubuntu Linux
The 13 CVEs of Ubuntu Linux →
CVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of…
3.3
Low
CVE-2026-47336
Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6…
3.3
Low
CVE-2026-47335
Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor…
5.5
Medium
CVE-2026-47334
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in…
5.5
Medium