CVE-2026-47328

{
  "id": "CVE-2026-47328",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-28T19:16:40.687",
  "lastModified": "2026-10-26T13:10:00.140",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion."
    },
    {
      "lang": "es",
      "value": "Ubuntu Linux 6.8, 6.17 y 7.0 contienen parches SAUCE de AppArmor que intentan liberar incorrectamente un puntero que no había sido previamente asignado con kmalloc(), mientras que, al mismo tiempo, fugan memoria asignada. El error puede ser activado por un usuario local sin privilegios y puede resultar en la corrupción de los metadatos de slab y podría llevar al agotamiento de recursos."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Canonical",
          "product": "Ubuntu Linux",
          "defaultStatus": "unaffected",
          "collectionURL": "https://launchpad.net/ubuntu/+source/",
          "packageName": "linux",
          "modules": [
            "AppArmor"
          ],
          "repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/",
          "versions": [
            {
              "version": "6.8.0",
              "lessThan": "6.8.0-124.124",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "6.17.0",
              "lessThan": "6.17.0-35.35",
              "versionType": "dpkg",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThan": "7.0.0-22.22",
              "versionType": "dpkg",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-28T19:20:06.494860Z",
          "id": "CVE-2026-47328",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-590"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "62D1BEC7-1A71-4991-A1A5-0E3D282100EC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "68D562DD-F22D-4310-93C7-7DE817104CAC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BB2642A-AA54-4949-A9FC-0E9673539350"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    }
  ]
}