Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2026-47337

NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical Ubuntu Linux

Default version status: unaffected

  • 6.8.0 to < 6.8.0-124.124affected
  • 6.17.0 to < 6.17.0-35.35affected
  • 7.0.0 to < 7.0.0-22.22affected

References