CVE-2026-47327
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches that may lead to a NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user, potentially resulting in a kernel oops.
Risk Assessment
This vulnerability may lead to system instability, posing risks to the integrity and availability of services. Unprivileged users could exploit this bug to trigger unexpected system behaviors.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability. Additionally, monitor system logs for any potential attempts to exploit this flaw.
Other vulnerabilities in Ubuntu Linux 6.8, 6.17, 7.0
See all- CVE-2026-47334Medium
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock.
- CVE-2026-47333High
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor SAUCE patches that may incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code.
- CVE-2026-47332Medium
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor SAUCE patches that incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code.
- CVE-2026-47328Medium
Ubuntu Linux 6.8, 6.17, and 7.0 contain AppArmor SAUCE patches that incorrectly attempt to free a pointer that was not previously kmalloc()d, leading to memory leaks. The bug can be triggered by an unprivileged local user.
- CVE-2026-47326Medium
Ubuntu Linux 6.8, 6.17, and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user.
Original NVD description (English source)
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS