CVE-2026-84410

Name of the Vulnerable Software and Affected Versions apport versions prior to 2.37.0

Description Improper privilege management allows an unprivileged local attacker to gain root privileges on systems with automatic crash reporting enabled. The crash report processing pipeline runs as root and executes the ldd command on the ExecutablePath field of a crash file located in the world-writable /var/crash directory. This process causes the dynamic loader to load and execute an attacker-supplied audit module specified by the ELF's DT AUDIT tag, enabling arbitrary code execution with root privileges.

Recommendations Update apport to version 2.37.0 or later.