Ubuntu CVE-2026-3888: Timing Flaw in systemd Cleanup Enables Root Privilege Escalation - Cybersecurity88
cybersecurity88.com
A critical Ubuntu vulnerability (CVE-2026-3888) allows attackers to gain root access through a systemd cleanup timing flaw. Learn how it works and how to fix it.

Yet another critical vulnerability in systemd, this time involving snapd. Ubuntu folk are affected.

“A serious security issue has been discovered in Ubuntu, and it is gaining attention in the cybersecurity community. The vulnerability is identified as CVE-2026-3888 and mainly affects Ubuntu Desktop systems from version 24.04 onwards. This flaw is dangerous because it allows an attacker with limited access to gain full root privileges. Root access means complete control over the entire system.”

  • bad1080@piefed.socialEnglish
    2·
    2 小时前

    how would i know if Kubuntu 25.10 is affected (based on ubuntu)?
    i guess this means yes?
    command 'snap' from deb snapd (2.73+ubuntu25.10.1)
    as it is lower than the version mentioned in the article “Upstream snapd: versions prior to 2.75”

    now the question is how do i force an update on that thing?
    sudo apt upgrade did not include an update for snapd:

    Upgrading:
    bpftool linux-headers-generic linux-libc-dev linux-tools-common
    linux-generic linux-image-generic linux-perf

    Installing dependencies:
    linux-headers-6.17.0-20 linux-image-6.17.0-20-generic linux-tools-6.17.0-20
    linux-headers-6.17.0-20-generic linux-modules-6.17.0-20-generic linux-tools-6.17.0-20-generic

    Suggested packages:
    linux-tools

    Not upgrading yet due to phasing:
    fwupd libfwupd3

    Summary:
    Upgrading: 7, Installing: 6, Removing: 0, Not Upgrading: 2
    Download size: 212 MB
    Space needed: 421 MB / 417 GB available

    edit:
    i tried sudo apt install snapd but it returned:

    snapd is already the newest version (2.73+ubuntu25.10.1).
    snapd set to manually installed.

    edit2:
    or am i save because of this?:

    Ubuntu 25.10 LTS: snapd versions prior to 2.73+ubuntu25.10.1