CVE-2026-47329

Incorrect validation of field size in Ubuntu Linux AppArmor notification responses

Published May 28, 2026 CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.

Analysis

Technical impact

Ubuntu Linux kernel versions 6.8, 6.17, and 7.0 contain SAUCE patches that do not properly validate the size of the name field in AppArmor notification responses. When an unprivileged local user sends a crafted notification with an invalid size, the kernel may process the response incorrectly, which could lead to unexpected kernel behavior. The impact is limited to the handling of the notification; no direct data disclosure or execution is indicated by the CVE data.

Affected Systems

Canonical's Ubuntu Linux operating system, specifically kernel releases 6.8, 6.17, and 7.0.

Risk and Exploitability

The CVSS score of 3.3 indicates a low severity vulnerability. The EPSS score is not available and the CVE is not listed in the CISA KEV catalog, suggesting a modest likelihood of exploitation. The inferred attack vector is local, requiring an unprivileged user to craft a malformed notification. No public exploit evidence is reported, but the flaw could be used by local attackers to disrupt kernel operations if additional weaknesses are present.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Canonical

Ubuntu Linux

unaffected

Version	Status	Constraints
`6.8.0`	affected	< 6.8.0-124.124
`6.17.0`	affected	< 6.17.0-35.35
`7.0.0`	affected	< 7.0.0-22.22

Configuration 1 [-]

OR	cpe:2.3:o:canonical:ubuntu_linux:24.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:25.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:26.04:::::::*

No data.

Vendor Product Versions

Canonical

Ubuntu Linux

Version	Status	Scheme	Platform
`[6.8.0,6.8.0-124.124)`	affected	generic	—
`[6.17.0,6.17.0-35.35)`	affected	generic	—
`[7.0.0,7.0.0-22.22)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the Ubuntu kernel to a version that includes the SAUCE patch for releases 6.8, 6.17, or 7.0.
If an immediate kernel upgrade is not possible, reduce AppArmor enforcement to "complain" mode to avoid kernel processing of notification responses.
Monitor system logs for AppArmor notification activity and review any abnormal behavior.

Generated by OpenCVE AI on May 28, 2026 at 21:36 UTC.

Tracking

Advisories

Source	ID	Title
Ubuntu USN	USN-8370-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8371-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8373-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8374-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8440-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8489-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-8497-1	Linux kernel (Low Latency) vulnerabilities
Ubuntu USN	USN-8499-1	Linux kernel (Xilinx) vulnerabilities
Ubuntu USN	USN-8569-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-8393-1	Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN	USN-8461-1	Linux kernel (Azure) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.092% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14

History

Jun 9, 2026 2:45 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:canonical:ubuntu_linux:24.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:25.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:26.04:::::::*

May 28, 2026 8:45 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Canonical Canonical ubuntu Linux
Vendors & Products		Canonical Canonical ubuntu Linux

May 28, 2026 8:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 28, 2026 7:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.
Title		Incorrect validation of field size in Ubuntu Linux AppArmor notification responses
Weaknesses		CWE-1284
References		https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14
Metrics		cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}`