Vulnerability in Canonical Ubuntu Linux
CVE-2026-47329
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted r…
EPSS: 0.000 (5.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Canonical Ubuntu Linux — versions 6.8.0, 6.17.0, 7.0.0
Weakness classification (CWE)
References
- security@ubuntu.com (patch)
Frequently asked questions
- What is CVE-2026-47329?
- CVE-2026-47329 is a low-severity vulnerability in Canonical Ubuntu Linux, classified under Improper Validation of Specified Quantity in Input. CVSS score: 3.3/10. Published 2026-05-28.
- How severe is CVE-2026-47329?
- Low severity. CVSS v3 base score is 3.3 out of 10.