Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579

Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges ×

Several security issues were fixed in snapd. Software Description: - snapd: Daemon and tooling that enable snap packages Details: James Henstridge discovered that snapd's default apparmor template did not restrict access to systemd-userdbd varlink interface. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2024-5300) Qualys discovered that snap-confine can be tricked to create attacker-controlled files at certain privileged locations. A local attacker could possibly use this issue to bypass intended restrictions and escalate privileges to root. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-8933) Zygmunt Krynicki discovered that snapd's default seccomp template did not restrict the creation of executables with the set-user-ID attribute. A local attacker could possibly use this issue to create and execute setuid binaries. (CVE-2026-15226)

Several security issues were fixed in snapd.

Software Description:

- snapd: Daemon and tooling that enable snap packages

James Henstridge discovered that snapd's default apparmor template did

not restrict access to systemd-userdbd varlink interface. A local

attacker could possibly use this issue to obtain sensitive information.

Qualys discovered that snap-confine can be tricked to create

attacker-controlled files at certain privileged locations. A local

attacker could possibly use this issue to bypass intended restrictions

and escalate privileges to root. This issue only affected

Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.

Zygmunt Krynicki discovered that snapd's default seccomp template

did not restrict the creation of executables with the set-user-ID

attribute. A local attacker could possibly use this issue to create

and execute setuid binaries. (CVE-2026-15226)

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS snapd 2.76+ubuntu26.04.3 Ubuntu 24.04 LTS snapd 2.76+ubuntu24.04.1 Ubuntu 22.04 LTS snapd 2.76+ubuntu22.04.1 Ubuntu 20.04 LTS snapd 2.67.1+20.04ubuntu1~esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS snapd 2.61.4ubuntu0.18.04.1+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS snapd 2.61.4ubuntu0.16.04.1+esm4 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes.

CVE-2024-5300, CVE-2026-15226, CVE-2026-8933

Ubuntu Security Notice USN-8579-1

Get the latest Linux and open source security news straight to your inbox.