https://seclists.org/oss-sec/2026/q1/333: snap-confine + systemd-tmpfiles = root (CVE-2026-3888)
Published Mar 18, 2026
·Updated
Affected Software
2 affected components
snap-confine
systemd
Frequently Asked Questions
1
What is the severity of CVE-2026-3888?
CVE-2026-3888 is considered a critical vulnerability due to its potential for privilege escalation leading to root access.
2
How do I fix CVE-2026-3888?
To remediate CVE-2026-3888, ensure that the /tmp directory is not world-writable and follow security best practices for file permissions.
3
Which systems are affected by CVE-2026-3888?
CVE-2026-3888 affects systems using snap-confine with specific configurations of systemd-tmpfiles that allow for insecure temporary file handling.
4
When was CVE-2026-3888 published?
CVE-2026-3888 was published on March 18, 2026.
5
Who reported CVE-2026-3888?
CVE-2026-3888 was reported by Michal Zalewski.