CVE-2026-47332CWE-125

Out-of-bounds read in Ubuntu Linux AppArmor notification handling

Medium · published May 28, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-05-28T18:28Z
EPSS history
Timeline
  • 28 MAY 18:28Z
    Out-of-bounds read in Ubuntu Linux AppArmor notification handling
    cvelistv5