Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
snapd
Vendor
Unknown
Product
Unknown
Platforms
Unknown
Default status
unaffected
Package
snapd
Package collection
https://github.com/canonical
snapd · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
2.75.1
Unavailable
None listed
Ubuntu 16.04 LTS
Vendor
Canonical
Product
Ubuntu 16.04 LTS
Platforms
Linux
Default status
affected
Package
snapd
Package collection
https://launchpad.net/ubuntu/xenial
Ubuntu 16.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.61.4ubuntu0.16.04.1+esm2
unaffected
dpkg
*
Unavailable
None listed
Ubuntu 18.04 LTS
Vendor
Canonical
Product
Ubuntu 18.04 LTS
Platforms
Linux
Default status
affected
Package
snapd
Package collection
https://launchpad.net/ubuntu/bionic
Ubuntu 18.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.61.4ubuntu0.18.04.1+esm2
unaffected
dpkg
*
Unavailable
None listed
Ubuntu 20.04 LTS
Vendor
Canonical
Product
Ubuntu 20.04 LTS
Platforms
Linux
Default status
affected
Package
snapd
Package collection
https://launchpad.net/ubuntu/focal
Ubuntu 20.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.67.1+20.04ubuntu1~esm1
unaffected
dpkg
*
Unavailable
None listed
Ubuntu 22.04 LTS
Vendor
Canonical
Product
Ubuntu 22.04 LTS
Platforms
Linux
Default status
affected
Package
snapd
Package collection
https://launchpad.net/ubuntu/jammy
Ubuntu 22.04 LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.73+ubuntu22.04.1
unaffected
dpkg
*
Unavailable
None listed
Ubuntu 24.04 LTS
Vendor
Canonical
Product
Ubuntu 24.04 LTS
Platforms
Linux
Default status
affected
Package
snapd
Package collection
https://launchpad.net/ubuntu/noble
Ubuntu 24.04 LTS · Scoped product and version facts