CVE-2026-47329: Canonical Ubuntu Linux

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.

Affected products

• Canonical Ubuntu Linux: version 24.04 only; version 25.10 only; version 26.04 only

Published 2026-05-28. Last modified 2026-06-17.