Ian Johnson

The issue is related to insufficient validation of input data in the snapd utility, which can allow an attacker to elevate privileges in the system and execute arbitrary code by injecting arbitrary AppArmor policy rules via malformed content interface and layout declarations. This can lead to escaping strict snap confinement.

A physical attacker could exploit this issue by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device, bypassing intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems.