CVE-2026-47327
Analyzed
Analyzed - Analysis Complete
NULL Pointer Dereference in Ubuntu Linux Kernel
Publication date: 2026-05-28
Last updated on: 2026-06-09
Assigner: Canonical Ltd.
Description
Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| canonical | ubuntu_linux | 24.04 |
| canonical | ubuntu_linux | 25.10 |
| canonical | ubuntu_linux | 26.04 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |