Ubuntu Linux CVE-2026-47337

Exploitation requires a local, authenticated session with at minimum an unprivileged (low-privilege) user account on the target system, as confirmed by CVSS vector AV:L/PR:L. The target must be running Ubuntu Linux with kernel version 6.8, 6.17, or 7.0 built specifically with Canonical's SAUCE patches - non-Ubuntu distributions or systems running mainline upstream kernels are not affected. The vulnerable code path is in the AF_INET/AF_INET6 socket mediation component of the SAUCE layer; no special non-default configuration is required beyond having a SAUCE-patched Ubuntu kernel active. Remote exploitation is not possible under any condition. Exploitation is further limited by the requirement for local shell access, meaning an attacker must have already compromised a local account or have physical/SSH access to the system prior to triggering this vulnerability.

CVSS 3.3 (Low) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L accurately characterizes this as a low-priority, local-only denial-of-service issue. The attack vector is Local (AV:L), meaning remote exploitation is not possible - an attacker must already have a shell on the target system. Privileges required are Low (PR:L), confirming an unprivileged local account suffices to trigger the bug. There is zero confidentiality or integrity impact (C:N/I:N), and availability impact is only Low (A:L), indicating a kernel oops rather than a full system halt in all cases. No KEV listing and no public exploit code identified at time of analysis further reduce real-world urgency. EPSS data was not provided, so exploitation probability cannot be quantified from that source. The primary real-world risk is on multi-tenant systems - shared servers, developer workstations with multiple local users, or container environments with host-kernel access - where an unprivileged account can disrupt all co-located users. On single-user systems, this is largely a self-inflicted denial of service. This vulnerability should be patched in routine kernel update cycles but does not warrant emergency response.

An unprivileged local user with a shell on an Ubuntu 6.8, 6.17, or 7.0 SAUCE-patched kernel system crafts a sequence of AF_INET or AF_INET6 socket operations that traverse the vulnerable mediation code path, triggering a NULL pointer dereference. The resulting kernel oops crashes or destabilizes the kernel, causing a denial of service affecting all users and processes on that machine. No public exploit code has been identified at time of analysis, but the low attack complexity (AC:L) suggests the trigger is straightforward once the specific NULL-deref condition within the SAUCE socket mediation path is identified.