CVE-2022-40297: Ubports Ubuntu Touch

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, far below typical length/complexity for a user account's password. NOTE: a third party states "The described attack cannot be executed as demonstrated.

Affected products

• Ubports Ubuntu Touch: version 16.04 only

Published 2022-09-09. Last modified 2026-06-17.