# CVE-2026-47328

## Summary

- **CVE ID:** CVE-2026-47328
- **Severity:** MEDIUM
- **CVSS Score:** 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- **CWE:** CWE-590
- **Published:** May 28, 2026
- **Last Modified:** May 28, 2026

## Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

## Affected Products

- Canonical — Ubuntu Linux (6.8.0)
- Canonical — Ubuntu Linux (6.17.0)
- Canonical — Ubuntu Linux (7.0.0)

## References

- [CNA](https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=7f3c4902c39432ce7ea0d384cb70eba282247fac)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.09%
- **EPSS Percentile:** 0.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._