CVE-2024-6714: Canonical Ubuntu Desktop Provision

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.

Affected products

• Canonical Ubuntu Desktop Provision: before 0.1.5 (fixed in 0.1.5)

Published 2024-07-23. Last modified 2026-06-17.