CVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation.
Published May 28, 2026 · updated Oct 14, 2026 · canonical ubuntu linux
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
Timeline
Detection, updates, and resolution for this record.
May 28, 2026 · NIST NVD
Detected
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
Oct 14, 2026 · NIST NVD
Updated
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
Affected
- cpe canonical/ubuntu linux6.17
- cpe canonical/ubuntu linux6.8
- cpe canonical/ubuntu linux7.0
Sources
- CVE.orgCVE-2026-47337
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-47337
30-day exploitation probability 0.1%
first.org - NIST NVDCVE-2026-47337
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.
nvd.nist.gov