Critical severity9.1NVD Advisory· Published Apr 9, 2026· Updated Apr 17, 2026
CVE-2025-15480
CVE-2025-15480
Description
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
Affected products
1- cpe:2.3:a:canonical:ubuntu_desktop_provision:24.04.4:*:*:*:*:*:*:*
Patches
29327345c4c72e730628911fdVulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2- github.com/canonical/ubuntu-desktop-provision/pull/1399nvdIssue TrackingPatch
- github.com/canonical/ubuntu-desktop-provision/pull/1400nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.