DNA View

CVE-2025-5054

Medium

Low Medium High Critical

4.7

CVSS Score

Published: May 30, 2025

Last Modified: Nov 03, 2025

CWE: CWE-362

Vulnerability Description

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces.

When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `consistency_checks`, which attempts to detect if the crashing process had been replaced. Because of this, if a process crashed and was quickly replaced with a containerized one, apport could be made to forward the core dump to the container, potentially leaking sensitive information. `consistency_checks` is now being called before `_check_global_pid_and_forward`. Additionally, given that the PID-reuse race condition cannot be reliably detected from userspace alone, crashes are only forwarded to containers if the kernel provided a pidfd, or if the crashing process was unprivileged (i.e., if dump mode == 1).

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Known Affected Software

10 configuration(s) from 1 vendor(s)

ubuntu_linux

Version:

16.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*

ubuntu_linux

Version:

18.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

ubuntu_linux

Version:

20.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*

ubuntu_linux

Version:

25.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:25.04:*:*:*:-:*:*:*

ubuntu_linux

Version:

24.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*

ubuntu_linux

Version:

22.04

CPE:

cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

ubuntu_linux

Version:

24.10

CPE:

cpe:2.3:o:canonical:ubuntu_linux:24.10:*:*:*:*:*:*:*

apport

Version:

2.20.1

CPE:

cpe:2.3:a:canonical:apport:2.20.1:*:*:*:*:*:*:*

apport

Version:

2.20.9

CPE:

cpe:2.3:a:canonical:apport:2.20.9:*:*:*:*:*:*:*

apport

Version:

2.19.2

CPE:

cpe:2.3:a:canonical:apport:2.19.2:*:*:*:*:*:*:*

This vulnerability affects 10 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

4.7

out of 10.0

Medium

Weakness Type (CWE)

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Description: The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Exploit Likelihood: Medium
Typical Severity: High
Abstraction Level: Class