CVE-2025-5467

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

Score

CVSS 3.1 3.3 Low

Status

Analyzed - security@ubuntu.com

Published

2025-12-10

Last modified

2026-10-14

Weaknesses

CWE-708

Affected products

• Apport (Canonical)

References

• https://www.stratascale.com/resource/cve-2025-32462-ubuntu-apport-vulnerability/
• https://bugs.launchpad.net/apport/+bug/2106338