CVE-2026-47328

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

CVSS 3.1

6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)

CWE

CWE-590

Published

2026-05-28

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

Affected

• canonical:ubuntu_linux

References

• https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac

Check your stackJSON