The vulnerability originates in the AppArmor SAUCE patches in Ubuntu Linux kernels 6.8, 6.17, and 7.0, where the code attempts to free a pointer that was not allocated by kmalloc. This incorrect deallocation corrupts slab metadata and leaks allocated memory, allowing an unprivileged local user to trigger the bug. The resulting memory corruption can cause resource exhaustion or further kernel instability.

Affected systems are Canonical Ubuntu Linux systems running kernel version 6.8, 6.17, or 7.0. The issue exists in the AppArmor SAUCE patches applied to those kernel releases.

The CVSS score of 6.1 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; an unprivileged user must execute code on the affected machine to trigger the bug. Exploitation could lead to kernel memory corruption and a denial‑of‑service by exhausting system resources, but the requirement for local access limits its threat scope to compromised or poorly managed systems.