Description
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in invalid data being processed by the AppArmor DFA policy engine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Canonical | Ubuntu Linux | 6.8.0 – < 6.8.0-124.124, 6.17.0 – < 6.17.0-35.35, 7.0.0 – < 7.0.0-22.22 | 6.8.0-124.124 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1023.27 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-22.22 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-aws +1 | 7.0.0-1006.6 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1005.5 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1007.7 | USN-8461-1, USN-8370-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1009.9 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-oem-7.0 | 7.0.0-1008.8 | USN-8489-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1011.11 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-22.22.1 | USN-8370-1 |
| Ubuntu 25.10 | linux | 6.17.0-35.35 | USN-8371-1 |
| Ubuntu 25.10 | linux-aws +1 | 6.17.0-1017.17 | USN-8371-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1018.19 | USN-8374-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1016.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1018.18 | USN-8371-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1014.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-35.35.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-124.124 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1057.60 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1017.17~24.04.1 | USN-8374-1, USN-8371-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1058.64 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1060.63 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1018.19~24.04.1 | USN-8374-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1055.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1042.45 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-35.35~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | USN-8569-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1057.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-134.134.1 | USN-8497-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1055.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1021.21 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1055.58.1 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1026.26 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1024.24 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1054.55 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1016.16~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1057.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-riscv +15 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-35.35.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1032.33 | USN-8499-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1057.60~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 | USN-8440-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1060.63~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-124.124~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1057.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 | USN-8497-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1055.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1054.55~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2046.47 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1052.53 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1014.16~24.04.1 | USN-8371-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1052.53~22.04.1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1057.60+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1059.65+fips1 | USN-8393-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-124.124+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1060.63+fips1 | USN-8373-1 |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-28.28 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1009.9 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1010.10 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1008.8 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-136.136 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1061.64 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1063.71 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1064.72 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1059.67 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1061.62 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1058.61 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-187.197 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1113.120 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1118.127 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1114.124 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1110.116 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1107.111 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-234.254 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-254.266 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1195.208 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1205.220 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1188.205 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-234.254~18.04.1 | LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1158.169 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-284.318 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1195.210 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1195.208~16.04.1 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1205.220~16.04.1 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1188.205~16.04.1 | LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-254.266~16.04.1 | LSN-0121-1 |
Advisories 12
- USN-8569-1 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8373-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8461-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8489-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8440-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8371-1 linux, linux-aws, linux-azure, linux-azure-6.17, linux-hwe-6.17, linux-nvidia-6.17, linux-oem-6.17, linux-oracle, linux-oracle-6.17, linux-raspi, linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8370-1 linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8374-1 linux-aws-6.17, linux-gcp, linux-gcp-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8393-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- LSN-0121-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Aug 31, 2026