---
id: CVE-2026-47337
title: >-
  Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL
  pointer dereference in the handling of AF_INET/AF_INET6 socket mediation
summary: >-
  Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL
  pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The
  bug can be triggered by an unprivileged local user. This can lead to a kernel
  oops.
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-476
vendor: canonical
product: ubuntu_linux
affected:
  - ubuntu_linux = 6.8
  - ubuntu_linux = 6.17
  - ubuntu_linux = 7.0
published: '2026-05-28'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T20:10:00.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-47337'
references:
  - url: >-
      https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/noble/commit/?id=9f03f0012a2367efae1edb4798f1c5103aeb6cbc
    label: security@ubuntu.com
tags:
  - nvd
epss: 0.00131
epssPercentile: 0.02397
ingestedAt: '2026-10-14T20:53:12.342Z'
---

## Overview

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation. The bug can be triggered by an unprivileged local user. This can lead to a kernel oops.

## Affected

- `ubuntu_linux = 6.8`
- `ubuntu_linux = 6.17`
- `ubuntu_linux = 7.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.