PT-2022-1909 · Canonical+3 · Snapd+4
Simon Mcvittie
·
Published
2022-02-17
·
Updated
2023-02-03
·
CVE-2021-44731
CVSS v3.1
7.8
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
snapd versions 2.54.2
Description
The issue is related to a race condition in the snap-confine binary of the snapd utility, which can be exploited to gain root privileges by executing arbitrary code. This can be achieved by a local attacker bind-mounting their own contents inside the snap's private mount namespace, causing snap-confine to execute the code and resulting in privilege escalation.
Recommendations
For snapd version 2.54.2, update to version 2.54.3+18.04, 2.54.3+20.04, or 2.54.3+21.10.1 to resolve the issue.
As a temporary workaround, consider restricting access to the
snap-confine binary until a patch is available.Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Red Os
Ubuntu
Snapd