CVE-2026-47326

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-28 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
canonical ubuntu_linux 24.04
canonical ubuntu_linux 25.10
canonical ubuntu_linux 26.04

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.09%
Raw Score 0.000930
Percentile 0.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00093
2026-10-28
0.00093

Intelligence Sources

nvd ref →