7.8
Élevée
CVE-2026-3888 Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's…
Description
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ubuntu 16.04 LTS 2.61 | premières → < 2.61.4ubuntu0.16.04.1+esm2 | 2.61.4ubuntu0.16.04.1+esm2 |
| Ubuntu 18.04 LTS 2.61 | premières → < 2.61.4ubuntu0.18.04.1+esm2 | 2.61.4ubuntu0.18.04.1+esm2 |
| Ubuntu 20.04 LTS | Versions non publiées | |
| Ubuntu 22.04 LTS 2.73 | premières → < 2.73+ubuntu22.04.1 | 2.73+ubuntu22.04.1 |
| Ubuntu 24.04 LTS 2.73 | premières → < 2.73+ubuntu24.04.2 | 2.73+ubuntu24.04.2 |
Références
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- discourse.ubuntu.com discourse.ubuntu.com
- blog.qualys.com blog.qualys.com
- cdn2.qualys.com cdn2.qualys.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ubuntu 16.04 LTS
Les 6 CVE de Ubuntu 16.04 LTS →
CVE-2026-15226
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment…
8.4
Élevée
CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile…
5.6
Moyenne
CVE-2026-12391
An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)…
5.0
Moyenne
CVE-2026-11386
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)
9.0
Critique