{"id":"CVE-2026-47329","state":"PUBLISHED","title":"Incorrect validation of field size in Ubuntu Linux AppArmor notification responses","description":"Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.","publishedAt":"2026-05-28T18:27:44.945Z","updatedAt":"2026-05-28T19:24:59.869Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"canonical"},"assigner":"canonical","products":["Canonical Ubuntu Linux"],"affected":[{"vendor":"Canonical","product":"Ubuntu Linux","packageName":"linux","defaultStatus":"unaffected","versions":[{"version":"6.8.0","status":"affected","lessThan":"6.8.0-124.124","versionType":"dpkg"},{"version":"6.17.0","status":"affected","lessThan":"6.17.0-35.35","versionType":"dpkg"},{"version":"7.0.0","status":"affected","lessThan":"7.0.0-22.22","versionType":"dpkg"}],"collectionURL":"https://launchpad.net/ubuntu/+source/","repo":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/","modules":["AppArmor"]}],"references":["https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14"],"weaknesses":["CWE-1284"],"ingestedAt":"2026-10-29T20:12:07.131Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/47xxx/CVE-2026-47329.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-47329","state":"PUBLISHED","datePublished":"2026-05-28T18:27:44.945Z","dateUpdated":"2026-05-28T19:24:59.869Z","assignerShortName":"canonical","assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateReserved":"2026-05-19T10:37:36.433Z"},"containers":{"cna":{"title":"Incorrect validation of field size in Ubuntu Linux AppArmor notification responses","descriptions":[{"lang":"en","value":"Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses."}],"affected":[{"vendor":"Canonical","product":"Ubuntu Linux","packageName":"linux","defaultStatus":"unaffected","versions":[{"version":"6.8.0","status":"affected","lessThan":"6.8.0-124.124","versionType":"dpkg"},{"version":"6.17.0","status":"affected","lessThan":"6.17.0-35.35","versionType":"dpkg"},{"version":"7.0.0","status":"affected","lessThan":"7.0.0-22.22","versionType":"dpkg"}],"collectionURL":"https://launchpad.net/ubuntu/+source/","repo":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/","modules":["AppArmor"]}],"references":[{"url":"https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9ea8b64b3ad27d0501cf711efa98077998a33b14","tags":["patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"LOW","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1284","lang":"en","description":"CWE-1284 Improper validation of specified quantity in input","type":"CWE"}]}],"providerMetadata":{"shortName":"canonical","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateUpdated":"2026-05-28T18:27:44.945Z"},"credits":[{"lang":"en","value":"Tristan Madani (@TristanInSec), Talence Security","type":"finder"}],"source":{"discovery":"EXTERNAL"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-28T19:19:57.301800Z","id":"CVE-2026-47329","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-28T19:24:59.869Z"}}]}}}