CVE-2021-44731

Name of the Vulnerable Software and Affected Versions snapd versions 2.54.2

Description The issue is related to a race condition in the snap-confine binary of the snapd utility, which can be exploited to gain root privileges by executing arbitrary code. This can be achieved by a local attacker bind-mounting their own contents inside the snap's private mount namespace, causing snap-confine to execute the code and resulting in privilege escalation.

Recommendations For snapd version 2.54.2, update to version 2.54.3+18.04, 2.54.3+20.04, or 2.54.3+21.10.1 to resolve the issue. As a temporary workaround, consider restricting access to the snap-confine binary until a patch is available.