Summary
Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup
delegation when generating systemd service units for various container
management snaps. This could allow a local attacker to escalate privileges
via access to arbitrary devices of the container host from within a
compromised or malicious container.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | snapd | 2.48.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | snapd | 2.48.3+18.04 |
| Ubuntu · 20.04 LTS 20.04:LTS | snapd | 2.48.3+20.04 |
Vulnerabilities 1
-
Critical 9.3
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegat…
References
-
report
https://ubuntu.com/security/CVE-2020-27352