What is GHSA-4hmr-4vjc-3rg2?

GHSA-4hmr-4vjc-3rg2 is a security advisory published by GitHub Security Advisories with Medium severity. Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size...

Which CVE IDs does GHSA-4hmr-4vjc-3rg2 cover?

GHSA-4hmr-4vjc-3rg2 covers the following CVE IDs: CVE-2026-47332. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hmr-4vjc-3rg2?

GHSA-4hmr-4vjc-3rg2 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-4hmr-4vjc-3rg2MediumCVSS 5.5

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size...

Vendor

GitHub Security Advisories

Published

May 28, 2026

Last Modified

May 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-47332 →

📋 Description

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information disclosure from adjacent slab objects.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-47332
https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=0418e5f61b55465f19245705bce6590c807fc9f2
https://github.com/advisories/GHSA-4hmr-4vjc-3rg2