What is CVE-2026-47328?

CVE-2026-47328 is a medium-severity vulnerability in Canonical Ubuntu Linux, classified under CWE-590. CVSS score: 6.1/10. Published 2026-05-28.

How severe is CVE-2026-47328?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Canonical Ubuntu Linux

CVE-2026-47328

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time leaking allocated memory. The bug can be triggered by an unprivileged local user and can result in the corruption of slab metadata and could lead to resource exhaustion.

EPSS: 0.001 (0.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H.

Affected products

Canonical Ubuntu Linux — versions 6.8.0, 6.17.0, 7.0.0
Canonical Ubuntu_linux — versions 24.04, 25.10, 26.04

Weakness classification (CWE)

CWE-590

References

security@ubuntu.com (Patch, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2026-47328?: CVE-2026-47328 is a medium-severity vulnerability in Canonical Ubuntu Linux, classified under CWE-590. CVSS score: 6.1/10. Published 2026-05-28.
How severe is CVE-2026-47328?: Medium severity. CVSS v3 base score is 6.1 out of 10.