Skip to content
Threat Feed
Subscribe

Vendor

Canonical

9 briefs RSS
high advisory

Multiple Vulnerabilities in Ubuntu Linux snapd Component

A local attacker can exploit multiple vulnerabilities found in Ubuntu Linux and the snapd component of Canonical Snap, leading to unauthorized information disclosure, privilege escalation to gain root access, and the ability to bypass existing security measures on the affected system.

Ubuntu Linux +1 privilege-escalation defense-evasion information-disclosure linux snapd
3t
high advisory

Ubuntu Desktop Vulnerability Allows Local Root Access via snap-confine

A high-severity vulnerability, CVE-2026-8933, in Ubuntu's snap-confine component of the snapd service allows an unprivileged local user to gain root access on affected Ubuntu Desktop systems by exploiting race conditions during temporary file creation, enabling full administrative control.

snapd +1 privilege-escalation vulnerability linux ubuntu local-access
1t 1c updated
medium advisory

Potential Privilege Escalation via SUID/SGID Proxy Execution on Linux

Attackers may exploit SUID/SGID binaries like pkexec, su, or sudo on Linux systems to execute commands with elevated privileges, by identifying instances where a process runs with root privileges (user ID 0 or group ID 0) while the real user or group ID is non-root, allowing a low-privilege foothold to gain full system control.

su +17 privilege-escalation linux-security defense-evasion persistence system-exploitation
1r 4t
low advisory

Potential Proxy Execution via Systemd-run on Linux

This brief details how attackers may leverage the `systemd-run` utility on Linux systems for defense evasion and execution by running commands as detached, transient services or scopes to obscure their activities and parent-child process chains.

Acronis Cyber Protect +46 defense-evasion execution linux
1r 3t
high advisory

CIFSwitch Linux Kernel Local Privilege Escalation Vulnerability

The CIFSwitch vulnerability in the Linux kernel allows an unprivileged user to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain root privileges by loading a malicious NSS module.

Linux Mint +12 privilege-escalation linux cifs kernel
2r 1t
medium advisory

Leveraging Linux Cgroups for Threat Detection and Investigation

This brief outlines how Linux cgroups, a kernel feature for resource management, can be repurposed to provide valuable telemetry for detecting malicious processes, particularly in systemd, Docker, and Kubernetes environments, aiding in investigations of server compromises.

Red Hat Enterprise Linux +5 linux cgroups container kubernetes docker systemd threat-detection
2r
medium advisory

Ubuntu Linux Kernel Vulnerabilities Addressed in Security Notices

Ubuntu released security notices between May 4 and 10, 2026, addressing vulnerabilities in the Linux kernel affecting Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS, and 25.10, requiring timely updates.

Ubuntu 20.04 LTS +3 linux kernel vulnerability patch
2r
high threat

Dirty Frag Linux Kernel Local Privilege Escalation Vulnerability

The Dirty Frag vulnerability (CVE-2026-43284 and CVE-2026-43500) is a Linux kernel local privilege escalation that allows an unprivileged local user to gain root privileges by exploiting flaws in the networking subsystem to overwrite protected file contents in the page cache.

exploited Linux kernel linux privilege-escalation vulnerability dirty_frag
2r 1t
high advisory

authd Incorrect Primary Group ID Vulnerability

authd 0.6.0 contains a bug that leads to an incorrect primary group ID being set to the user's UID, potentially leading to local privilege escalation and incorrect file ownership, fixed in authd >= 0.6.4.

authd privilege-escalation linux
2r 1t 1c