CVE-2022-3328

CVSS: 7.0 High
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Risk score: 56.0
Published: 2024-01-08
Status: Modified

Race condition in snap-confine's must_mkdir_and_open_with_perms()

Weaknesses

CWE-362

Coverage 1

vulnerability

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

A critical vulnerability (CVE-2026-8933, CVSS 7.8) has been discovered in snap-confine within Ubuntu Desktop installations. An unprivileged user can exploit a race condition to gain root access and full control of the sy…

The Hacker News · Jul 22, 2026 High

CVE-2026-8933 CVE-2021-44731 CVE-2022-3328 local privilege escalation race condition ubuntu

All articles mentioning it

Advisories and references

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328
ubuntu.com/security/notices/USN-5753-1
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328
ubuntu.com/security/notices/USN-5753-1

news.mlab.sh

CVE-2022-3328

Weaknesses

Coverage 1

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Advisories and references