snap-confine + systemd-tmpfiles = root (CVE-2026-3888)
19 March 2026 at 14:31
Posted by Qualys Security Advisory via Fulldisclosure on Mar 19
Qualys Security AdvisoryGood things come to those who wait:
snap-confine + systemd-tmpfiles = root (CVE-2026-3888)
========================================================================
Contents
========================================================================
Summary
Case study: Ubuntu Desktop 24.04
- Analysis
- Exploitation
Case study: Ubuntu Desktop 25.10
- Overview
- Exploitation
A quick note on the uutils coreutils (the...