VULNERABILITY INTELLIGENCE

CVE-2025-5467

CVSS score3.3 LOW

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-12-10

Last modified2026-10-14

Description

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.