Skip to content
Sign in
2.7 Low

CVE-2025-15480 In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting

Description

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

Affected products and versions

Product Affected versions Fixed in
Ubuntu 25.10 earliest → 25.10 No fix stated
Ubuntu 25.04 earliest → 25.04 No fix stated
Ubuntu 24.04 earliest → 24.04.4 No fix stated

Other CVEs of Ubuntu

The 3 CVEs of Ubuntu →
CVE-2026-10037 A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu 8.8 High CVE-2025-14551 In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting 2.7 Low
Track this CVE