7.8
High
CVE-2026-3888 Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's…
Description
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS 2.61 | earliest → < 2.61.4ubuntu0.16.04.1+esm2 | 2.61.4ubuntu0.16.04.1+esm2 |
| Ubuntu 18.04 LTS 2.61 | earliest → < 2.61.4ubuntu0.18.04.1+esm2 | 2.61.4ubuntu0.18.04.1+esm2 |
| Ubuntu 20.04 LTS | Versions not published | |
| Ubuntu 22.04 LTS 2.73 | earliest → < 2.73+ubuntu22.04.1 | 2.73+ubuntu22.04.1 |
| Ubuntu 24.04 LTS 2.73 | earliest → < 2.73+ubuntu24.04.2 | 2.73+ubuntu24.04.2 |
References
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- discourse.ubuntu.com discourse.ubuntu.com
- blog.qualys.com blog.qualys.com
- cdn2.qualys.com cdn2.qualys.com
Timeline
- Published
- Last modified
Other CVEs of Ubuntu 16.04 LTS
The 6 CVEs of Ubuntu 16.04 LTS →
CVE-2026-15226
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment…
8.4
High
CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile…
5.6
Medium
CVE-2026-12391
An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)…
5.0
Medium
CVE-2026-11386
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)
9.0
Critical