Skip to content
OpenAdvisories
High DSA-5080-1 2 CVEs

snapd - security update

Published Feb 18, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 snapd 2.37.4-1+deb10u1
Debian · 11 snapd 2.49-1+deb11u1

Vulnerabilities 2

  • High 7.8
    CVE-2021-44730

    snapd could be made to escalate privileges and run programs as administrator

    snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd ver…

    Canonical snapd snapd snapd Debian Ubuntu
  • High 7.8
    CVE-2021-44731 Public exploit

    snapd could be made to escalate privileges and run programs as administrator

    A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and c…

    Canonical snapd snapd snapd Debian Ubuntu