Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-47329
PUBLISHED
More InfoOfficial Page
Assigner-canonical
Assigner Org ID-cc1ad9ee-3454-478d-9317-d3e869d708bc
View Known Exploited Vulnerability (KEV) details
Published At-28 May, 2026 | 18:27
Updated At-28 May, 2026 | 19:24
Rejected At-
▼CVE Numbering Authority (CNA)
Incorrect validation of field size in Ubuntu Linux AppArmor notification responses

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.

Affected Products
Vendor
Canonical Ltd.Canonical
Product
Ubuntu Linux
Collection URL
https://launchpad.net/ubuntu/+source/
Package Name
linux
Repo
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/
Modules
  • AppArmor
Default Status
unaffected
Versions
Affected
  • From 6.8.0 before 6.8.0-124.124 (dpkg)
  • From 6.17.0 before 6.17.0-35.35 (dpkg)
  • From 7.0.0 before 7.0.0-22.22 (dpkg)
Problem Types
TypeCWE IDDescription
CWECWE-1284CWE-1284 Improper validation of specified quantity in input
Type: CWE
CWE ID: CWE-1284
Description: CWE-1284 Improper validation of specified quantity in input
Metrics
VersionBase scoreBase severityVector
3.13.3LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Version: 3.1
Base score: 3.3
Base severity: LOW
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Tristan Madani (@TristanInSec), Talence Security
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14
patch
Hyperlink: https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14
Resource:
patch
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found