CVE-2025-5467Low· 3.3▾ SunlitIt was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
apport >= 2.20.1-0ubuntu1, < 2.20.1-0ubuntu2.30apport >= 2.20.9-0ubuntu7, < 2.20.9-0ubuntu7.29apport >= 2.20.11-0ubuntu27, < 2.20.11-0ubuntu27.28apport >= 2.20.11-0ubuntu82, < 2.20.11-0ubuntu82.7apport >= 2.28.1-0ubuntu1, < 2.28.1-0ubuntu3.6apport >= 2.32.0-0ubuntu1, < 2.32.0-0ubuntu5.1Upgrade past the affected range:
apport 2.32.0-0ubuntu5.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-47337Low· 3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation
CVE-2026-47336Low· 3.3Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code
CVE-2026-47335Medium· 5.5Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications
CVE-2026-49238High· 8.4An issue was discovered in Canonical Multipass before version 1.16.3
CVE-2026-49237High· 7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199
CVE-2025-54292Medium· 4.6Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths.