CVE-2025-5467
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposi…
Published Dec 10, 2025 · updated Oct 14, 2026 · canonical apport
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Timeline
Detection, updates, and resolution for this record.
Dec 10, 2025 · NIST NVD
Detected
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Oct 14, 2026 · NIST NVD
Updated
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
Affected
- cpe canonical/apportversion unspecified
Sources
- CVE.orgCVE-2025-5467
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-5467
30-day exploitation probability 0.2%
first.org - NIST NVDCVE-2025-5467
It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.
nvd.nist.gov