Description
An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Canonical | Ubuntu Desktop Provision | < 0.1.5 | 0.1.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | provd | 0.1.2+24.04 | USN-6912-1 |
Advisories 1
- USN-6912-1 provd vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026