https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T21:23:57.549900+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-7303 CVE-2019-7303 — Snapd seccomp filter TIOCSTI ioctl bypass 2026-10-05T21:23:57.577363+00:00

Affected: Canonical snapd

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

 https://vulnerability.circl.lu/vuln/usn-3917-1 USN-3917-1 — snapd vulnerability 2026-10-05T21:23:57.577627+00:00

Affected: Ubuntu:14.04:LTS: snapd, Ubuntu:16.04:LTS: snapd, Ubuntu:18.04:LTS: snapd

The snapd default seccomp filter for strict mode snaps blocks the use of the ioctl() system call when used with TIOCSTI as the second argument to the system call. Jann Horn discovered that this restriction could be circumvented on 64 bit architectures. A malicious snap could exploit this to bypass intended access restrictions to insert characters into the terminal's input queue. On Ubuntu, snapd typically will have already automatically refreshed itself to snapd 2.37.4 which is unaffected.