--- cve: "CVE-2025-5054" severity: "MEDIUM" cvss: 4.7 epss: "71%" vendor: "Canonical" kev: false exploited: false published: "2025-05-30 18:15:32" tags: [cve, security, medium] source: tsecurity.de CVE-Dossier exported: "2026-09-10T10:57:31+02:00" --- # CVE-2025-5054 > 4.7 MEDIUM ## Beschreibung Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `consistency_checks`, which attempts to detect if the crashing process had been replaced. Because of this, if a process crashed and was quickly replaced with a containerized one, apport could be made to forward the core dump to the container, potentially leaking sensitive information. `consistency_checks` is now being called before `_check_global_pid_and_forward`. Additionally, given that the PID-reuse race condition cannot be reliably detected from userspace alone, crashes are only forwarded to containers if the kernel provided a pidfd, or if the crashing process was unprivileged (i.e., if dump mode == 1). ## CVSS-Vektor ``` CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N ``` | Metrik | Wert | Bewertung | |---|---|---| | AV Angriffsvektor | Lokal | good | | AC Komplexität | Hoch | good | | PR Privilegien | Gering | warn | | UI Interaktion | Keine | bad | | S Scope | Unverändert | good | | C Vertraulichkeit | Hoch | bad | | I Integrität | Keine | good | | A Verfügbarkeit | Keine | good | ## Referenzen - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-5054) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_