PatchTheCVECVE-2024-29068: In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap
CVE-2024-29068 is a medium-severity flaw (CVSS 5.8) affecting snapd. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.8 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 89%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2024-07-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-29068?
snapd: upgrade to 2.62. Exact commands for each OS are on this page.
Is CVE-2024-29068 being exploited?
CVE-2024-29068 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-29068 affect?
CVE-2024-29068 affects snapd. Severity is medium (CVSS 5.8). In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Vario
How urgent is CVE-2024-29068?
Priority 23/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-5138 HIGH 8.1 UPGRADE The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain pr
- CVE-2024-29069 MEDIUM 4.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extract
- CVE-2024-1724 MEDIUM 6.3 UPGRADE In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to
- CVE-2023-1523 CRITICAL 10.0 UPGRADE MITIGATE Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling te
- CVE-2022-3328 HIGH 7.8 UPGRADE MITIGATE Race condition in snap-confine's must_mkdir_and_open_with_perms()