This vulnerability involves an out-of-bounds read (CWE-125) in the AppArmor SAUCE patches of Ubuntu Linux versions 6.8.0, 6.17.0, and 7.0.0. The root cause is improper size validation of an internal data structure within the notification handling code. Exploitation requires local, low-privileged user access and can lead to unauthorized disclosure of information from adjacent memory objects in the slab allocator. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact.

An unprivileged local user can exploit this vulnerability to read memory beyond intended boundaries, resulting in potential disclosure of sensitive information from adjacent slab objects. There is no impact on integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Canonical's advisories for updates. Until a patch is available, restricting local user access and minimizing untrusted local user privileges may reduce risk.