Local Privilege Escalation Vulnerability (CVE-2026-3888) Affects Ubuntu Desktop 24.04 and Later

A local privilege escalation vulnerability (CVE-2026-3888) affects default installations of Ubuntu Desktop 24.04 and later versions, allowing attackers with local access to gain root privileges. The flaw exploits the interaction between snap-confine and the scheduled cleanup process of systemd-tmpfiles, with exploitation dependent on a time window of 10 to 30 days, varying by Ubuntu version. Successful exploitation could result in full control of the affected system. No specific patch or mitigation timeline is mentioned in the report.