Most recent entries from all

CVE-2026-3888 — Local Privilege Escalation in snapd

Affected: snapd, Canonical Ubuntu 16.04 LTS, Canonical Ubuntu 18.04 LTS, Canonical Ubuntu 20.04 LTS, Canonical Ubuntu 22.04 LTS, Canonical Ubuntu 24.04 LTS

Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.

USN-8102-1 — snapd vulnerability

Affected: Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:20.04:LTS: snapd, Ubuntu:22.04:LTS: snapd, Ubuntu:24.04:LTS: snapd, Ubuntu:25.10: snapd

Qualys discovered that snapd incorrectly handled certain operations in the snap's private /tmp directory. If systemd-tmpfiles is enabled to automatically clean up this directory, a local attacker could possibly use this issue to re-create the deleted directory, resulting in privilege escalation.