← Zuruck zu CVEs

CVE-2026-3888

HIGH

7.8

Beschreibung

Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht3/17/2026

Zuletzt geandert3/18/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-268

Referenzen

https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-root(security@ubuntu.com)

https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt(security@ubuntu.com)

https://discourse.ubuntu.com/t/snapd-local-privilege-escalation-cve-2026-3888(security@ubuntu.com)

https://ubuntu.com/security/CVE-2026-3888(security@ubuntu.com)

https://ubuntu.com/security/notices/USN-8102-1(security@ubuntu.com)

http://www.openwall.com/lists/oss-security/2026/03/18/1(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.