CVE-2026-47332

Analyzed Analyzed - Analysis Complete

AppArmor Out-of-Bounds Read in Ubuntu Linux

Publication date: 2026-05-28

Last updated on: 2026-06-09

Assigner: Canonical Ltd.

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-28

Last Modified

2026-06-09

Generated

2026-07-08

AI Q&A

2026-05-28

EPSS Evaluated

2026-07-06

NVD

CVE-2026-47332

EUVD

EUVD-2026-32987

Affected Vendors & Products

Vendor	Product	Version / Range
canonical	ubuntu_linux	24.04
canonical	ubuntu_linux	25.10
canonical	ubuntu_linux	26.04

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Ubuntu Linux versions 6.8, 6.17, and 7.0 within the AppArmor SAUCE patches. It involves incorrect validation of the size of an internal structure, which leads to an out-of-bounds read in the notification handling code.

An unprivileged local user can trigger this bug, causing the system to read memory beyond the intended boundaries, potentially disclosing information from adjacent slab objects.

Impact Analysis

The vulnerability can lead to information disclosure, meaning that sensitive data stored in adjacent memory areas (slab objects) could be exposed to an unprivileged local user.

Since the vulnerability allows reading memory out-of-bounds, it could compromise confidentiality but does not affect integrity or availability.

Hi! I’m here to help you understand CVE-2026-47332. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70