CVE:CVE-2021-44731
CNNVD:CNNVD-202202-1421
Snapd是开源的一个跨平台的包管理工具。
snapd 2.54.2版本存在竞争条件问题漏洞，该漏洞源于当为snap准备私有挂载命名空间时，snap2.54.2 snap- restricted二进制文件中存在一个竞争条件。这可能允许本地攻击者可利用该漏洞通过在snap的私有挂载名称空间中绑定挂载自己的内容，从而获得根权限，并执行任意代码，从而获得权限升级。
solution:Upgrade canonical snapd to a higher version than 2.54.2,and avoid the version (,2.54.2]; Upgrade canonical ubuntu_linux to a higher version than 18.04,20.04,21.10,and avoid the version 18.04,20.04,21.10; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0