Ubuntu Linux kernel versions 6.8, 6.17 and 7.0 contain SAUCE patches that may expose a NULL pointer dereference when handling AppArmor notifications. The flaw can be triggered by an unprivileged local user and results in a kernel oops, a form of denial of service that brings down the affected system. The weakness is identified as uncontrolled memory access (CWE‑476).

The vulnerability affects Canonical Ubuntu Linux kernel versions 6.8, 6.17 and 7.0. All installations of these kernels on Ubuntu systems are potentially impacted.

The CVSS score of 3.3 indicates low severity. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting it is not currently exploited in the wild. The attack vector is local, requiring the attacker to be a non‑privileged user on the affected system. Exploitation requires no special conditions beyond local access, and would cause a kernel oops, terminating the affected process or rebooting the system.