CVE-2026-47334
Full vulnerability record from the local CVENow database.
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-28 19:16:42.203000
Last modified
2026-10-26 13:10:00.140000
View original CVE JSON
{
"id": "CVE-2026-47334",
"sourceIdentifier": "[email protected]",
"published": "2026-05-28T19:16:42.203",
"lastModified": "2026-10-26T13:10:00.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock."
},
{
"lang": "es",
"value": "Ubuntu Linux 6.8, 6.17 y 7.0 contienen parches SAUCE de AppArmor que duermen incorrectamente mientras mantienen un spinlock en el código de manejo de notificaciones. El error puede ser activado por un usuario local sin privilegios y puede resultar en pánico del kernel o interbloqueo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Canonical",
"product": "Ubuntu Linux",
"defaultStatus": "unaffected",
"collectionURL": "https://launchpad.net/ubuntu/+source/",
"packageName": "linux",
"modules": [
"AppArmor"
],
"repo": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/",
"versions": [
{
"version": "6.8.0",
"lessThan": "6.8.0-124.124",
"versionType": "dpkg",
"status": "affected"
},
{
"version": "6.17.0",
"lessThan": "6.17.0-35.35",
"versionType": "dpkg",
"status": "affected"
},
{
"version": "7.0.0",
"lessThan": "7.0.0-22.22",
"versionType": "dpkg",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-28T19:21:02.287047Z",
"id": "CVE-2026-47334",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-833"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*",
"matchCriteriaId": "62D1BEC7-1A71-4991-A1A5-0E3D282100EC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*",
"matchCriteriaId": "68D562DD-F22D-4310-93C7-7DE817104CAC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB2642A-AA54-4949-A9FC-0E9673539350"
}
]
}
]
}
],
"references": [
{
"url": "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=f0e73aec23d13a9877fba096b1c2fd19f66e5313",
"source": "[email protected]",
"tags": [
"Patch"
]
}
]
}