← Back to CVE Explorer

CVE-2026-47326

Full vulnerability record from the local CVENow database.

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion.

Severity
MEDIUM
CVSS score
5.5 (v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-28 19:16:40.110000
Last modified
2026-10-26 13:10:00.140000
View original CVE JSON
{
  "id": "CVE-2026-47326",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-28T19:16:40.110",
  "lastModified": "2026-10-26T13:10:00.140",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion."
    },
    {
      "lang": "es",
      "value": "Ubuntu Linux 6.8, 6.17 y 7.0 contienen parches SAUCE con una fuga de memoria en el manejo de respuestas grandes a las notificaciones de AppArmor. El error puede ser provocado por un usuario local sin privilegios. La fuga de memoria podría llevar al agotamiento de recursos."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Canonical",
          "product": "Ubuntu Linux",
          "defaultStatus": "unaffected",
          "collectionURL": "https://launchpad.net/ubuntu/+source/",
          "packageName": "linux",
          "modules": [
            "AppArmor"
          ],
          "repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/",
          "versions": [
            {
              "version": "6.8.0",
              "lessThan": "6.8.0-124.124",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "6.17.0",
              "lessThan": "6.17.0-35.35",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThan": "7.0.0-22.22",
              "versionType": "dpkg",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-28T19:20:50.758806Z",
          "id": "CVE-2026-47326",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-401"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "62D1BEC7-1A71-4991-A1A5-0E3D282100EC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "68D562DD-F22D-4310-93C7-7DE817104CAC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BB2642A-AA54-4949-A9FC-0E9673539350"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=8d858ecb7e2e216ca2987302a04c266f2355fefe",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    }
  ]
}