CVE-2026-47329

Analyzed Analyzed - Analysis Complete

AppArmor Notification Size Validation Flaw in Ubuntu Linux

Publication date: 2026-05-28

Last updated on: 2026-06-09

Assigner: Canonical Ltd.

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-28

Last Modified

2026-06-09

Generated

2026-07-08

AI Q&A

2026-05-28

EPSS Evaluated

2026-07-06

NVD

CVE-2026-47329

EUVD

EUVD-2026-32984

Affected Vendors & Products

Vendor	Product	Version / Range
canonical	ubuntu_linux	24.04
canonical	ubuntu_linux	25.10
canonical	ubuntu_linux	26.04

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Ubuntu Linux versions 6.8, 6.17, and 7.0 where SAUCE patches fail to properly validate invalid sizes of the name field in AppArmor notification responses.

An unprivileged local user can trigger this bug by crafting specific responses that exploit this validation failure.

Impact Analysis

The vulnerability could allow an unprivileged local user to handle crafted AppArmor notification responses improperly, potentially leading to limited integrity issues.

According to the CVSS score (3.3), the impact is low severity with no confidentiality or availability impact, but it may affect system integrity.

Hi! I’m here to help you understand CVE-2026-47329. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70