CVE-2026-47328 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2026-47328

Analyzed

More Info Official Page

Source-security@ubuntu.com

Published At-28 May, 2026 | 19:16

Updated At-09 Jun, 2026 | 16:33

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Type: Secondary

Version: 3.1

Base score: 6.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CPE Matches

>>ubuntu_linux>>24.04

cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:*:*:*:*

>>ubuntu_linux>>25.10

cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*

>>ubuntu_linux>>26.04

cpe:2.3:o:canonical:ubuntu_linux:26.04:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-590	Secondary	security@ubuntu.com

CWE ID: CWE-590

Type: Secondary

Source: security@ubuntu.com

References

Hyperlink	Source	Resource
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac	security@ubuntu.com	Patch

Hyperlink: https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac

Source: security@ubuntu.com

Resource:

Patch