PatchTheCVECVE-2024-29069: In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extract
CVE-2024-29069 is a medium-severity flaw (CVSS 4.8) affecting snapd. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file entries within the snap squashfs image (such as icons and desktop files etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained sy
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-29069?
snapd: upgrade to 2.62. Exact commands for each OS are on this page.
Is CVE-2024-29069 being exploited?
CVE-2024-29069 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-29069 affect?
CVE-2024-29069 affects snapd. Severity is medium (CVSS 4.8). In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file
How urgent is CVE-2024-29069?
Priority 20/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-5138 HIGH 8.1 UPGRADE The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain pr
- CVE-2024-29068 MEDIUM 5.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap
- CVE-2024-1724 MEDIUM 6.3 UPGRADE In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to
- CVE-2023-1523 CRITICAL 10.0 UPGRADE MITIGATE Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling te
- CVE-2022-3328 HIGH 7.8 UPGRADE MITIGATE Race condition in snap-confine's must_mkdir_and_open_with_perms()