Spyke
linux·Linuxbycm0002

Timing Flaw in systemd Cleanup Enables Root Privilege Escalation

Yet another critical vulnerability in systemd, this time involving snapd. Ubuntu folk are affected.

"A serious security issue has been discovered in Ubuntu, and it is gaining attention in the cybersecurity community. The vulnerability is identified as CVE-2026-3888 and mainly affects Ubuntu Desktop systems from version 24.04 onwards. This flaw is dangerous because it allows an attacker with limited access to gain full root privileges. Root access means complete control over the entire system."

Timing Flaw in systemd Cleanup Enables Root Privilege Escalationhttps://cybersecurity88.com/news/ubuntu-cve-2026-3888-timing-flaw-in-systemd-cleanup-enables-root-privilege-escalation/?=0Open linkView original on toast.ooo
33
Comments6
LiveLMreply
lemmy.zip

Reading the post, the issue is more on Snap's side and the way Ubuntu configures it than on Systemd.

Ubuntu automatically deletes old files from the /tmp directory after a certain number of days. During this cleanup, an important directory used by snap-confine may get removed. This creates an opportunity for the attacker to act. Once the directory is deleted, the attacker quickly recreates it with malicious content.

In this scenario, a cron job could trigger it too.

14
Makireply
lemmy.blahaj.zone

Ah, well, yet another mark against using snap then. My bad. Thanks for letting me know. :)

7
Lucy :3reply
feddit.org

And that's why you use at least very basic owner/group and mod permission validation on internal files

3

You reached the end

Timing Flaw in systemd Cleanup Enables Root Privilege Escalation | Spyke