CVE-2026-47332: Out-of-bounds read in Ubuntu Linux AppArmor notification handling
Last updated 5 June 2026
Other sources
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.257-1Fixed in 6.1.170-3Fixed in 6.1.174-1Fixed in 6.12.86-1Fixed in 6.12.90-2Fixed in 7.0.10-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.257-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.170-3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.174-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.86-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.90-2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.0.10-1 - Compensating control
Restrict unprivileged local user access to affected systems (limit local accounts, console and remote access for untrusted users) until systems are updated to a fixed version.
- Operational
Audit affected systems for signs of information disclosure and rotate any credentials or secrets that may have been exposed prior to applying the fixes.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47332?
The severity of CVE-2026-47332 is classified as medium with a score of 5.5.
How does CVE-2026-47332 affect Ubuntu Linux applications?
CVE-2026-47332 affects Ubuntu Linux versions 6.8, 6.17, and 7.0 by allowing local unprivileged users to trigger an out-of-bounds read in AppArmor notification handling.
What are the potential impacts of CVE-2026-47332?
The potential impact of CVE-2026-47332 includes information disclosure from adjacent memory regions.
How do I fix CVE-2026-47332?
To fix CVE-2026-47332, ensure you are using the patched versions of Ubuntu Linux as provided in official updates.
Who is affected by CVE-2026-47332?
CVE-2026-47332 primarily affects unprivileged local users on systems running the vulnerable versions of Ubuntu Linux.