VULNERABILITY INTELLIGENCE

CVE-2026-47328

CVSS score6.1 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

Weakness classification

  • security@ubuntu.com: CWE-590

Primary references