CVE-2026-47332: Out-of-bounds read in Ubuntu Linux AppArmor notification handling
Last updated 5 June 2026
Other sources
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.257-1Fixed in 6.1.170-3Fixed in 6.1.174-1Fixed in 6.12.86-1Fixed in 6.12.90-2Fixed in 7.0.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47332?
The severity of CVE-2026-47332 is classified as medium with a score of 5.5.
How does CVE-2026-47332 affect Ubuntu Linux applications?
CVE-2026-47332 affects Ubuntu Linux versions 6.8, 6.17, and 7.0 by allowing local unprivileged users to trigger an out-of-bounds read in AppArmor notification handling.
What are the potential impacts of CVE-2026-47332?
The potential impact of CVE-2026-47332 includes information disclosure from adjacent memory regions.
How do I fix CVE-2026-47332?
To fix CVE-2026-47332, ensure you are using the patched versions of Ubuntu Linux as provided in official updates.
Who is affected by CVE-2026-47332?
CVE-2026-47332 primarily affects unprivileged local users on systems running the vulnerable versions of Ubuntu Linux.