Snapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328) | Qualys
Summary: Qualys Threat Research Unit discovered CVE-2022-3328, a race condition in snap-confine, a SUID-root program installed by default on Ubuntu, introduced in February 2022 by the patch for CVE-2021-44731. Qualys exploited it on Ubuntu Server by chaining it with two multipathd flaws, CVE-2022-41974 and CVE-2022-41973, to gain full root privileges as any unprivileged user.
Key Takeaway: The flaw was created by the fix for an earlier vulnerability, so systems patched against CVE-2021-44731 may have inherited this one - and Qualys has already demonstrated full root on default Ubuntu installs by combining three bugs.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-44731CVE-2022-3328CVE-2022-41973CVE-2022-41974
- Related
- Oh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731) | Qualys Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026