CVE-2025-15480: Canonical Ubuntu Desktop Provision

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.

Affected products

• Canonical Ubuntu Desktop Provision: version 24.04.4 only

Published 2026-04-09. Last modified 2026-10-07.