Vulnerabilities in snapd and Rust Coreutils that allow root privilege escalation in Ubuntu.
Qualys has identified a vulnerability (CVE-2026-3888) in the way the snap-confine and systemd-tmpfiles interact in Ubuntu, allowing an unprivileged user to gain root access to the system. The issue occurs in Ubuntu with the default configuration starting from release 24.04. In Ubuntu versions 16.04-22.04, the vulnerability can be exploited in non-standard configurations that mimic the behavior of newer distribution versions. A fix for the issue is available in yesterday's […]
