CVE-2026-47328 PUBLISHED

Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling

Assigner: canonical
Reserved: 19.05.2026 Published: 28.05.2026 Updated: 28.05.2026

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS Score: 6.1

Product Status

Vendor Canonical
Product Ubuntu Linux
Versions Default: unaffected
  • affected from 6.8.0 to 6.8.0-124.124 (excl.)
  • affected from 6.17.0 to 6.17.0-35.35 (excl.)
  • affected from 7.0.0 to 7.0.0-22.22 (excl.)

Credits

  • Tristan Madani (@TristanInSec), Talence Security finder

References

Problem Types

  • CWE-590 Free of memory not on the heap CWE