CVE-2026-47332 — Out-of-bounds read in Ubuntu Linux AppArmor notification handling

CVE-2026-47332

Out-of-bounds read in Ubuntu Linux AppArmor notification handling PUBLISHED

Description (CNA)

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.

Affected (CNA)

Vendor / product	Versions
Canonical / Ubuntu Linux	affected 6.8.0 before 6.8.0-124.124; affected 6.17.0 before 6.17.0-35.35; affected 7.0.0 before 7.0.0-22.22

CWE

CWE-125

References

https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=0418e5f61b55465f19245705bce6590c807fc9f2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.