CVE-2026-3888
CVE-2026-3888
7.8
HighPublished:
Last updated:
Source:security@ubuntu.com
Analyzed
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Local
- Attack Complexity
- High
- Privileges Required
- Low
- User Interaction
- None
- Scope
- Changed
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
References
security@ubuntu.com
https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-rootsecurity@ubuntu.com
https://ubuntu.com/security/CVE-2026-3888security@ubuntu.com
https://ubuntu.com/security/notices/USN-8102-1af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2026/03/18/1