7.8 HighCWE-268
CVE-2026-3888
Local Privilege Escalation in snapd
CanonicalUbuntu 16.04 LTS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
1.4%probability of exploitation in the next 30 days
Higher than 72% of scored CVEs
SeverityCVSS
7.8High
Description NVD
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 18 Mar · 09:32 UTC | The Hacker News | Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit |
| Wed 18 Mar · 12:06 UTC | Security Affairs | CVE-2026-3888: Ubuntu Desktop 24.04+ vulnerable to Root exploit |
| Wed 18 Mar · 16:11 UTC | Infosecurity | New Ubuntu Flaw Enables Local Attackers to Gain Root Access |
- New Ubuntu Flaw Enables Local Attackers to Gain Root AccessInfosecurity
- CVE-2026-3888: Ubuntu Desktop 24.04+ vulnerable to Root exploitSecurity Affairs
- Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing ExploitThe Hacker News · first in our coverage