NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2022-3328

CVSS 3.1: 7.0 high
EPSS: <1%p31
Published: Jan 8, 2024 · Jan 8, 2024
Modified: Jun 17, 2026

Analyze CVE-2022-3328 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Race condition in snap-confine's must_mkdir_and_open_with_perms()

Vendors: canonical

Products: snapd, ubuntu linux

Weakness: CWE-362

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

3 stories

Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

The Hacker NewsDec 5, 10:50 UTC · Dec 5, 2022VulnerabilityCVE-2022-23093 CVE-2021-44731 CVE-2022-3328+21

60

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

The Hacker NewsJul 23, 04:00 UTC · Jul 23, 2026VulnerabilityCVE-2026-8933 CVE-2021-44731 CVE-2022-3328+15 · 1 read

47

A new Linux flaw can be chained with other two bugs to gain full root privileges

Security AffairsDec 3, 00:16 UTC · Dec 3, 2022VulnerabilityCVE-2022-3328 CVE-2021-44731 CVE-2022-41974+12

35