CVE-2026-47327 — NULL pointer dereference in Ubuntu Linux AppArmor notification handling

CVE-2026-47327

NULL pointer dereference in Ubuntu Linux AppArmor notification handling PUBLISHED

Description (CNA)

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu Linux	affected 6.8.0 before 6.8.0-124.124; affected 6.17.0 before 6.17.0-35.35; affected 7.0.0 before 7.0.0-22.22

CWE

CWE-476

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.